13439 matches found
The vulnerability of the software product lies in its ability to identify, simulate, and visualize application architectures in real time. The IBMTivoli Application Dependency Discovery Manager (TADDM) is susceptible to this vulnerability due to the lack of measures taken to protect the structure of web pages. This allows attackers to execute cross-site scripting attacks.
The vulnerability of the software product for identifying, modeling, and visualizing application architectures in real time – IBMTivoli Application Dependency Discovery Manager TADDM – is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability...
CVE-2025-6122
creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18459 2025-06-16 15:28:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqc7ndydr2m...
kernel: ndisc: use RCU protection in ndisc_alloc_skb()
A vulnerability was found in the Linux kernel's IPv6 Neighbor Discovery NDISC subsystem, which manages network neighbor information. The issue arises from improper synchronization mechanisms when allocating socket buffers skbuff in the ndiscallocskb function. Specifically, the function can be...
Freefloat FTP Server 1.0 - Remote Buffer Overflow
Exploit Title: Freefloat FTP Server 1.0 - Remote Buffer Overflow Date: 22 may 2025 Notification vendor: No reported Discovery by: Fernando Mengali LinkedIn: https://www.linkedin.com/in/fernando-mengali-273504142/ Version: 1.0 Tested on: Windows XP SP3 English - Version 5.1 Build...
PT-2025-25295 · Undefined · Undefined
EchoLeak: First-Ever Zero-Click Vulnerability, CVE-2025-3271, Discovered by Aim Labs in Microsoft 365 Copilot AI, Allowed Attackers Steal Sensitive Data Silently, Now Fixed EchoLeak Hackers Microsoft Copilot CopilotAgent MIcrosoft365 @Microsoft @Copilot...
kernel: drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'
An out-of-bounds access flaw was found in drivers/gpu/drm/amd/amdgpu/amdgpudiscovery.c in the Linux kernel. This issue may lead to a crash...
ELFuzz: Efficient Input Generation Via LLM-Driven Synthesis over Fuzzer Space
Generation-based fuzzing produces appropriate testing cases according to specifications of input grammars and semantic constraints to test systems and software. However, these specifications require significant manual efforts to construct. This paper proposes a new approach, ELFuzz Evolution...
Security Bulletin: IBM Tivoli Application Dependency Discovery Manager is vulnerable to stored cross-site scripting.
Summary IBM Tivoli Application Dependency Discovery Manager is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...
Security Bulletin: Due to Apache CXF used by IBM WebSphere Application Server Liberty, IBM Tivoli Application Dependency Discovery Manager is vulnerable to denial of service.
Summary IBM Tivoli Application Dependency Discovery Manager is affected by a denial of service vulnerability due to the use of Apache CXF in IBM WebSphere Application Server Liberty, when the jaxws-2.2, xmlWS-3.0, or xmlWS-4.0 feature is enabled. CVE-2025-23184 Vulnerability Details...
USN-7559-1 systemd vulnerability
Qualys discovered that systemd incorrectly handled metadata when processing application crashes. An attacker could possibly use this issue to expose sensitive information...
USN-7545-2: Apport regression
USN-7545-1 fixed a vulnerability in Apport. The update introduced a regression that prevented core dumps from being generated inside containers. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Qualys discovered that Apport incorrectly handled metadata...
WordPress GiftXtore theme <= 1.7.5 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Phat RiO - BlueRock in WordPress Theme GiftXtore versions = 1.7.5...
WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability
WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme = 2.4 - Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme BodyCenter - Gym, Fitness WooCommerce WordPress Theme versions = 2.4...
WordPress Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability
WordPress Valen - Sport, Fashion WooCommerce WordPress Theme = 2.4 - Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Valen - Sport, Fashion WooCommerce WordPress Theme versions = 2.4...
Qualys Recognized as The Leader in Attack Surface Management by KuppingerCole
In today’s ever-evolving security landscape, organizations face an unprecedented expansion of digital assets—and with that expansion comes a growing attack surface. We're proud to announce that Qualys has been named The Leader in the2025 KuppingerCole Leadership Compass for Attack Surface...
CVE-2025-48951
creationtimestamp| type| source ---|---|--- 2025-06-04 00:41:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqql3p4lyu2s 2025-06-05 05:03:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lqtk7bbq742s 2025-06-08 02:22:40+00:00| seen|...
Discover First, Defend Fully: The Essential First Step on Your API Security Journey
APIs power today’s digital economy, but their lightning-fast evolution and astronomical call volumes can leave security teams scrambling to keep up. How can you secure what you can’t yet see or quantify? Imperva’s Unlimited Discovery-Only capability for the Cloud WAF CWAF add-On delivers...
CVE-2018-12455
creationtimestamp| type| source ---|---|--- 2025-06-03 12:58:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-12455.yaml 2025-06-04 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqspc47a2d2i...