Cisco Unified Communications Manager 跨站脚本漏洞

Cisco Unified Communications Manager is a call-processing component of a unified communications system from Cisco USA. The component provides a scalable, distributed, and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists in Cisco Unifie...

Phantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth Malware

Government and telecommunications organizations across Africa, the Middle East, and Asia have emerged as the target of a previously undocumented China-aligned nation-state actor dubbed Phantom Taurus over the past two-and-a-half years. "Phantom Taurus' main focus areas include ministries of forei...

MAL-2025-47585 Malicious code in funny-font-wow (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476f2be479b43f09e5f3955a6404c84db43a4b9a81eee04f4916668d38f4bbfa Any computer that has this package installed or running should be considered...

CVE-2025-34199

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.1049 and Application versions prior to 20.0.2786 VA and SaaS deployments contain insecure defaults and code patterns that disable TLS/SSL certificate verification for communications to printers and internal...

CVE-2025-34199

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.1049 and Application versions prior to 20.0.2786 VA and SaaS deployments contain insecure defaults and code patterns that disable TLS/SSL certificate verification for communications to printers and internal...

CVE-2025-34199

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 22.0.1049 and Application versions prior to 20.0.2786 VA and SaaS deployments contain insecure defaults and code patterns that disable TLS/SSL certificate verification for communications to printers and internal...

Mitsubishi Electric MELSEC-Q Series 安全漏洞

The Mitsubishi Electric MELSEC-Q Series is a family of programmable logic controllers from Mitsubishi Electric Japan. A security vulnerability exists in the Mitsubishi Electric MELSEC-Q Series that arises from improper handling of the length parameter, which could result in an integer overflow th...

CVE-2023-53382 net/smc: Reset connection when trying to use SMCRv2 fails.

In the Linux kernel, the following vulnerability has been resolved: net/smc: Reset connection when trying to use SMCRv2 fails. We found a crash when using SMCRv2 with 2 Mellanox ConnectX-4. It can be reproduced by: - smcrun nginx - smcrun wrk -t 32 -c 500 -d 30 http://: BUG: kernel NULL pointer...

BMC Control-M Memory Corruption Vulnerability

BMC Control-M is an application from BMC Corporation. Simplifies application and data workflow orchestration locally or as a service. A memory corruption vulnerability exists in BMC Control-M that stems from misconfiguration of SSL/TLS communication, no details of the vulnerability are provided a...

Malicious code in tml-fallback (npm)

The package communicates with a domain associated with malicious activity...

CVE-2022-50373

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix race in lowcomms This patch fixes a race between queuework in dlmlowcommscommitmsg and srcureadunlock. The queuework can take the final reference of a dlmmsg and so msg-idx can contain garbage which is signaled by th...

How to Set Up and Use a Burner Phone

Obtaining and using a true burner phone is hard—but not impossible. Here are the steps you need to take to protect your mobile communications based on the risks you face...

UBUNTU-CVE-2023-53233

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix deadlock triggered by canceldelayedworksyn The following LOCKDEP was detected: Workqueue: events smclgrfreework smc WARNING: possible circular locking dependency detected...

Fluid-Antenna-Aided AAV Secure Communications in Eavesdropper Uncertain Location

For autonomous aerial vehicle AAV secure communications, traditional designs based on fixed position antenna FPA lack sufficient spatial degrees of freedom DoF, which leaves the line-of-sight-dominated AAV links vulnerable to eavesdropping. To overcome this problem, this paper proposes a framewor...

Cisco Unified Communications Manager IM & Presence Service Cross-Site Scripting (cisco-sa-imp-xss-XQgu4HSG)

According to its self-reported version, Cisco Unified Communications Manager IM & Presence is affected by a cross-site scripting vulnerability: - A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an...

CVE-2025-52161

Scholl Communications AG Weblication CMS Core v019.004.000.000 was discovered to contain a cross-site scripting XSS vulnerability...

PT-2025-36476

Name of the Vulnerable Software and Affected Versions: Scholl Communications AG Weblication CMS Core version 019.004.000.000 Description: The software contains a cross-site scripting XSS issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

Scholl Communications AG Weblication CMS Core 安全漏洞

Scholl Communications AG Weblication CMS Core is a content management system from Scholl Communications AG, Germany. A security vulnerability exists in Scholl Communications AG Weblication CMS Core version v019.004.000.000, which stems from vulnerability to cross-site scripting attacks...

CVE-2025-52161

Scholl Communications AG Weblication CMS Core v019.004.000.000 was discovered to contain a cross-site scripting XSS vulnerability...

CVE-2025-20330

A vulnerability in the web-based management interface of Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the...