CVE-2025-54295

CVE-2025-54295 concerns a Reflected XSS in the DJ-Reviews Joomla extension (versions 1.0–1.3.6). The vulnerability arises from a reflected cross-site scripting issue in that component, as reported across multiple sources (NVD/Red Hat/CVE list, PT Security). Affected product: DJ-Reviews (DJ-Extens...

PT-2025-33791

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.19-kernel Description: A double-free vulnerability exists in the Bluetooth stack within the Linux kernel, specifically within the hci discovery filter clear function. This function frees a memory region uui...

Moderate: Red Hat Security Advisory: avahi security update

An update for avahi is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

RHEL 9 : avahi (RHSA-2025:11402)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:11402 advisory. Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service...

CVE-2025-7888

creationtimestamp| type| source ---|---|--- 2025-07-20 15:10:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufr44myo62j 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:41+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-50240

nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin...

CVE-2024-33832

creationtimestamp| type| source ---|---|--- 2025-07-17 11:51:46+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-33832.yaml 2025-07-18 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lubdsqw3eh2q...

BADBOX 2.0 Found Preinstalled on Android IoT Devices Worldwide

BADBOX variant BADBOX 2.0 found preinstalled on Android IoT devices in 222 countries, turning them into proxy nodes used in fraud and large-scale malicious activity...

CVE-2025-24391

A vulnerability in the External Interface of OTRS allows conclusions to be drawn about the existence of user accounts through different HTTP response codes and messages. This enables an attacker to systematically identify valid email addresses. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023....

The vulnerability of the Simple Search and Discovery Protocol (SSDP) service in Microsoft Windows operating systems allows a perpetrator to increase their privileges or cause a service failure.

The vulnerability of the Simple Search and Discovery Protocol SSDP service in Microsoft Windows operating systems is related to data type mixing errors. Exploiting this vulnerability can allow attackers to increase their privileges or cause service failures...

CVE-2025-7503

creationtimestamp| type| source ---|---|--- 2025-07-15 17:42:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ltzh7v7v2f24 2025-07-21 00:52:15+00:00| seen| https://bsky.app/profile/nelnia.bsky.social/post/3lugrljszkk2x...

Why Traditional Vulnerability Management Isn’t Working and What to Do Instead

Security teams are under more pressure than ever. With attack surfaces growing, regulations tightening, and the average breach cost climbing, it's no surprise that many organizations are rethinking how they approach vulnerability management. But here’s the catch: knowing where your vulnerabilitie...

From Semantic Web and MAS to Agentic AI: a Unified Narrative of the Web of Agents

The concept of the Web of Agents WoA, which transforms the static, document-centric Web into an environment of autonomous agents acting on users' behalf, has attracted growing interest as large language models LLMs become more capable. However, research in this area is still fragmented across...

The vulnerability of the Windows SSDP service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows SSDP service on Microsoft Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows SSDP service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows SSDP service on Microsoft Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-50122

A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with access to installation or upgrade artifacts...

Squid Dominated the Oceans in the Late Cretaceous

New research: One reason the early years of squids has been such a mystery is because squids' lack of hard shells made their fossils hard to come by. Undeterred, the team instead focused on finding ancient squid beaks--hard mouthparts with high fossilization potential that could help the team...

CVE-2025-50122

A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with access to installation or upgrade artifacts...

CVE-2025-50122

A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reverse engineered with access to installation or upgrade artifacts...

PT-2025-29275

Name of the Vulnerable Software and Affected Versions: saltbo zpan versions up to 1.6.5 saltbo zpan version 1.7.0-beta2 Description: A vulnerability exists in saltbo zpan related to the JSON Web Token Handler component. The issue affects the NewToken function within the...