5979 matches found
EUVD-2025-37720
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.7.2. An app may be able to access protected user data...
EUVD-2025-37629
This issue was addressed through improved state management. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...
EUVD-2025-37659
The issue was addressed with improved memory handling. This issue is fixed in Safari 26, tvOS 26, watchOS 26, iOS 26 and iPadOS 26, visionOS 26. Processing maliciously crafted web content may lead to memory corruption...
Would you sext ChatGPT? (Lock and Code S06E22)
This week on the Lock and Code podcast … In the final, cold winter months of the year, ChatGPT could be heating up. On October 14, OpenAI CEO Sam Altman said that the "restrictions" that his company previously placed on their flagship product, ChatGPT, would be removed, allowing, perhaps, for...
Security Bulletin: IBM OpenPages for Cloud Pak for Data is Vulnerable to Multiple Spring Framework Vulnerabilities (CVE-2024-38828,CVE-2024-38820)
Summary Spring MVC controller vulnerable to a DoS attack and DataBinder Case Sensitive Match Exception. These vulnerabilities were remediated. Vulnerability Details CVEID:CVE-2024-38828 DESCRIPTION: Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS...
CVE-2025-34270
creationtimestamp| type| source ---|---|--- 2025-10-30 23:44:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4h5dslq5c2k...
EUVD-2025-37115
Malicious code in epic-path-utils npm...
CVE-2025-54471 NeuVector is shipping cryptographic material into its binary
NeuVector used a hard-coded cryptographic key embedded in the source code. At compilation time, the key value was replaced with the secret key value and used to encrypt sensitive configurations when NeuVector stores the data...
A Comprehensive Evaluation and Practice of System Penetration Testing
With the rapid advancement of information technology, the complexity of applications continues to increase, and the cybersecurity challenges we face are also escalating. This paper aims to investigate the methods and practices of system security penetration testing, exploring how to enhance syste...
EUVD-2025-36695
Malicious code in ect-987654 npm...
EUVD-2025-36550
Vulnerable Upgrade Feature Arbitrary File Write may lead to obtaining super user permissions on board.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-61128
creationtimestamp| type| source ---|---|--- 2025-10-28 15:43:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115452557190111700 2025-10-28 17:53:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4bisqxppc2b...
EUVD-2025-36416
Malicious code in shopify-ruby npm...
Siemens SIMATIC Devices Improper Input Validation (CVE-2024-34027)
f2fs: compress: filesystem metadata including blkaddr in dnode, inode fields and .totalvalidblockcount may be corrupted after SPO case. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Secure Control of Connected and Autonomous Electrified Vehicles under Adversarial Cyber-Attacks
Connected and Autonomous Electrified Vehicles CAEV is the solution to the future smart mobility having benefits of efficient traffic flow and cleaner environmental impact. Although CAEV has advantages they are still susceptible to adversarial cyber attacks due to their autonomous electric operati...
MAL-2025-48726 Malicious code in ldhpgemrdhs92007 (npm)
The package ldhpgemrdhs92007 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
WordPress DoFollow Case by Case plugin <= 3.5.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin DoFollow Case by Case versions = 3.5.1...
CVE-2025-46597
creationtimestamp| type| source ---|---|--- 2025-10-25 22:57:52+00:00| seen| https://bsky.app/profile/earlybirdsinvest.bsky.social/post/3m42igc6k2b2t 2026-03-23 15:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqd7rymcj2h...