CVE-2025-0608

CVE-2025-0608 corresponds to an Open Redirect in Logo Cloud by Logo Software Inc. Several connected sources confirm that Logo Cloud versions prior to 2025.R6 are susceptible via URL redirection to untrusted sites, enabling phishing and forceful browsing. The root cause is an input/URL parameter m...

CVE-2025-0608 Open Redirect in Logo Software's Logo Cloud

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing. This issue affects Logo Cloud: before 2025.R6...

CVE-2025-0606

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure. This issue affects Logo Cloud: before 0.67...

CVE-2025-0607 HTML Injection in Logo Software's Logo Cloud

Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing. This issue affects Logo Cloud: before 2.57...

EUVD-2025-32527

Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing.This issue affects Logo Cloud: before 2.57...

CVE-2025-0607

CVE-2025-0607 affects Logo Cloud (Logo Software Inc.). Multiple sources confirm an improper encoding/escaping of output leads to phishing/XSS against Logo Cloud versions prior to 2.57. Impact is user interaction required with potential credential or data exposure via manipulation of output. Remed...

CVE-2025-0607 HTML Injection in Logo Software's Logo Cloud

Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing. This issue affects Logo Cloud: before 2.57...

CVE-2025-0607

Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing. This issue affects Logo Cloud: before 2.57...

CVE-2025-0606

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure. This issue affects Logo Cloud: before 0.67...

CVE-2025-0606

Logo Cloud by Logo Software Inc. is affected by CVE-2025-0606 due to an authorization bypass caused by a user-controlled key. This flaw enables forceful browsing and potential resource disclosure on Logo Cloud versions before 0.67. The issue’s root cause is the improper handling of keys that gran...

CVE-2025-0606 IDOR in Logo Software's Logo Cloud

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure. This issue affects Logo Cloud: before 0.67...

EUVD-2025-32521

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure.This issue affects Logo Cloud: before 0.67...

CVE-2025-0606 IDOR in Logo Software's Logo Cloud

Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure. This issue affects Logo Cloud: before 0.67...

Detecting DLL hijacking with machine learning: real-world cases

Introduction Our colleagues from the AI expertise center recently developed a machine-learning model that detects DLL-hijacking attacks. We then integrated this model into the Kaspersky Unified Monitoring and Analysis Platform SIEM system. In a separate article, our colleagues shared how the mode...

PT-2025-40883

Name of the Vulnerable Software and Affected Versions Logo Cloud versions prior to 2.57 Description An issue exists in Logo Cloud that allows for phishing attacks due to improper encoding or escaping of output. This can lead to cross-site scripting XSS where malicious code is injected into web...

Logo Cloud 安全漏洞

Logo Cloud is a series of cloud-based services and products from Logo Turkey. A security vulnerability exists in Logo Cloud versions prior to 2.57 that stems from improper output encoding or escaping, which could lead to a phishing attack...

PT-2025-40885

Name of the Vulnerable Software and Affected Versions Logo Cloud versions prior to 1.18 Description A flaw exists in Logo Cloud that allows for Cross-Site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerability could potentially allow an...

What Is Quantum Computer Security?

Quantum computing is rapidly emerging as one of the most transformative technologies of our time. With the potential to tackle problems that remain intractable for even the most powerful classical supercomputers, quantum hardware has advanced at an extraordinary pace. Today, major platforms such ...

PT-2025-40882

Name of the Vulnerable Software and Affected Versions Logo Cloud versions prior to 0.67 Description An authorization bypass exists in Logo Cloud due to a user-controlled key issue. This allows for forceful browsing and exposure of resources. The issue involves bypassing intended access controls...

wisdom-education 安全漏洞

wisdom-education is a cloud intelligence education platform by zhuimengshaonian individual developer. A security vulnerability exists in wisdom-education 1.0.4 and earlier versions, which originates from the incorrect operation of subjectId in the file...