Dragonfly's manager makes requests to external endpoints with disabled TLS authentication

The Manager disables TLS certificate verification in two HTTP clients figures 3.1 and 3.2. The clients are not configurable, so users have no way to re-enable the verification. golang func getAuthTokenctx context.Context, header http.Header string, error skipped client := &http.Client Timeout:...

CVE-2025-49460

Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-49461

Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

httpd: mod_ssl: access control bypass by trusted clients is possible using TLS 1.3 session resumption

An access control bypass vulnerability was found in Apache httpd. The Apache HTTP Server with some modssl configurations can bypass the access controls by trusted clients using TLS 1.3 session resumption. A client trusted to access one virtual host may be able to access another if...

Neo4j MCP Clients & Servers 安全漏洞

Neo4j MCP Clients & Servers is a Neo4j Contrib open source protocol for managing large language model contexts. A security vulnerability exists in Neo4j MCP Clients & Servers version 0.3.0, which originates in the SSE service and could lead to the disclosure of sensitive information or the...

CVE-2025-58135

Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-49461

Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-49458

Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-49460

Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-49460

Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-49458

Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-58134 Zoom Workplace Clients for Windows - Incorrect Authorization

Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access...

CVE-2025-58134

CVE-2025-58134 concerns Zoom Workplace Windows clients. Multiple sources confirm an Incorrect authorization issue that may allow an authenticated user to impact integrity over the network. Affected products include Zoom Workplace Clients for Windows (and related VDI/WIN components in Nessus refer...

CVE-2025-49461 Zoom Workplace Clients - Cross-site Scripting

Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-49461 Zoom Workplace Clients - Cross-site Scripting

Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-49460

The CVE-2025-49460 issue affects Zoom Workplace family components (notably Zoom Workplace/VDI Client) with versions older than fixed releases. The publicly documented impact is Uncontrolled resource consumption that allows an unauthenticated remote attacker to cause a denial of service over the n...

CVE-2025-49460 Zoom Workplace Clients - Argument Injection

Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-49460 Zoom Workplace Clients - Argument Injection

Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-49458 Zoom Workplace Clients - Buffer Overflow

Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access...

CVE-2025-49458

CVE-2025-49458 describes a buffer overflow in Zoom Workplace Clients that could allow an authenticated user to cause a denial of service over the network. Public documentation and scanner advisories (e.g., ZSB-25031) indicate the issue affects Zoom Workplace Clients generally and is mitigated by ...