EUVD-2022-0386

Malicious code in bioql PyPI...

CVE-2025-41096

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the dates of the current contract details using unauthorised internal identifiers...

CVE-2025-41096

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the dates of the current contract details using unauthorised internal identifiers...

CVE-2025-41096 Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the dates of the current contract details using unauthorised internal identifiers...

CVE-2025-41096

Summary: CVE-2025-41096 is an Insecure Direct Object Reference (IDOR) in Bold Workplanner, affecting versions prior to 2.5.25. The vulnerability arises from insufficient validation of user input, allowing an authenticated user to access the dates of current contract details using unauthorized int...

PT-2025-39977

Name of the Vulnerable Software and Affected Versions BOLD Workplanner versions prior to 2.5.25 Description An Insecure Direct Object Reference IDOR issue exists in BOLD Workplanner. The problem stems from insufficient validation of user input, potentially allowing an authenticated user to access...

Bold Workplanner 安全漏洞

Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that can be exploited by an attacker to access the date of current contract details using an...

SUSE CVE-2025-11021

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

CVE-2025-11021 Libsoup: out-of-bounds read in cookie date handling of libsoup http library

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in...

libsoup 缓冲区错误漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A buffer error vulnerability exists in libsoup, which stems from an out-of-bounds memory read when handling cookies with specially crafted expiration dates, which could lead to an unexpected disclosure of memory contents...

Build Numbers and Versions of Veeam Plug-in for Scale Computing HyperCore

This KB article lists all versions of the Veeam Plug-in for Scale Computing HyperCore and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-in for Scale Computing HyperCore 4 Releases Veeam Plug-in for Scale Computing HyperCore 4.0...

CVE-2024-43717

creationtimestamp| type| source ---|---|--- 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18 16:44:34+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764...

CVE-2024-43722

creationtimestamp| type| source ---|---|--- 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18 16:44:32+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764...

CVE-2024-52858

creationtimestamp| type| source ---|---|--- 2025-09-16 23:16:38+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764 2025-09-18 16:44:33+00:00| seen| MISP/be792712-f638-4d7d-b62d-4f5032e86764...

GHSA-3GCM-F6QX-FF7P

creationtimestamp| type| source ---|---|--- 2025-09-16 21:24:42+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lyyazskuuc2o 2025-09-22 20:08:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115249756985787179...

CVE-2025-40694

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'fromdate' and 'todate' parameters via POST at the endpoint '/ofrs/admin/bwdates-report-result.php'. This vulnerability...

RHSA-2024:3467

creationtimestamp| type| source ---|---|--- 2025-08-27 13:18:18+00:00| seen| Telegram/UAejBj98RzShpsNkXUUt6fObsqMDpRdGyfFwVPtg8w8Sx0w 2025-08-27 13:18:19+00:00| seen| Telegram/RZsgBjEKFpqvyCP045mGfeIhNqahv01cUbn8KU7bsiulOCE 2025-08-30 15:22:53+00:00| seen|...

CVE-2025-53085

creationtimestamp| type| source ---|---|--- 2025-08-25 18:30:14+00:00| seen| https://infosec.place/objects/de54d7bd-1d09-48f4-8166-de141cb2e764 2025-08-26 00:58:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbcq6a24a22...

CVE-2025-55299

creationtimestamp| type| source ---|---|--- 2025-08-18 20:23:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwpa3jvqke2c 2025-08-19 04:31:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwq3ejegsd24...

Connect with the security community at Microsoft Ignite 2025

In today’s AI-powered world, security professionals are facing unprecedented challenges—and opportunities. As generative AI reshapes the digital landscape, the need for robust, intelligent, and adaptive security strategies has never been more urgent. At Microsoft Ignite 2025, we will showcase...