ABB Cylon Aspect 3.08.03 (logYumLookup.php) Hybrid Path Traversal

Summary ASPECT is an award-winning scalable building energy management and control solution designed to allow users seamless access to their building data through standard building protocols including smart devices. Description The ABB Cylon Aspect BAS controller is vulnerable to an authenticated...

CVE-2008-2464

The mldinput function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service divide-by-zero error and panic via a malformed ICMPv6 Multicast Listener Discovery MLD query with a certain Maximum Response Del...

CVE-2009-2212

The CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows attackers to discover a 1 username or 2 password via unspecified vectors...

CVE-2008-4404

The IPv6 Neighbor Discovery Protocol NDP implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity or read private network traffic via a spoofed message that modifies the Forwa...

CVE-1999-0453

An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol CDP...

WordPress Vizeon - Business Consulting theme <= 1.1.7 - Local File Inclusion Vulnerability

WordPress Vizeon - Business Consulting theme = 1.1.7 - Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Vizeon - Business Consulting versions = 1.1.7...

WordPress Yozi theme <= 2.0.63 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Yozi versions = 2.0.63...

WordPress Pet World theme <= 2.8 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Pet World versions = 2.8...

WordPress Finance Consultant theme <= 2.8 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Finance Consultant versions = 2.8...

Blind Spot Navigation: Evolutionary Discovery of Sensitive Semantic Concepts for LVLMs

Whitepaper called Blind Spot Navigation: Evolutionary Discovery Of Sensitive Semantic Concepts For LVLMs...

CVE-2025-48016

CVE-2025-48016 involves the OpenFlow discovery protocol that can exhaust resources because it is not rate limited. Connected sources indicate SEL Series hardware/software may be affected, but explicit affected versions are not provided. The Red Hat/NVD entries describe the issue similarly; PT-Sec...

Schweitzer Engineering Laboratories SEL Series 安全漏洞

Schweitzer Engineering Laboratories SEL Series is a series of software and firmware products from Schweitzer Engineering Laboratories, Inc. A security vulnerability exists in the Schweitzer Engineering Laboratories SEL Series that stems from the OpenFlow discovery protocol that is not rate-limite...

CVE-2025-4907

creationtimestamp| type| source ---|---|--- 2025-05-19 03:38:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16799 2025-05-19 05:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpissinmex2p...

MAL-2025-3885 Malicious code in etherbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71305511ac73c9c681a5abf765d127187bb45c8c2b946c2ce40afe03e408c0d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHSA-2025:7630 Red Hat Security Advisory: updated discovery-cli RPMs

Bulletin has no description...

CVE-2024-2473

creationtimestamp| type| source ---|---|--- 2025-05-15 07:24:21+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-2473.yaml 2025-05-15 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxtmgqd2a 2026-01-27...

Important: Red Hat Security Advisory: updated discovery-cli RPMs

Updated discovery-cli dsc and discovery-installer RPMs are now available for Discovery 1.14. New version of Discovery CLI dsc and installer are now available for RHEL 8 and RHEL 9 for Discovery 1.14...

Agent Name Service (ANS): a Universal Directory for Secure AI Agent Discovery and Interoperability

The proliferation of AI agents requires robust mechanisms for secure discovery. This paper introduces the Agent Name Service ANS, a novel architecture based on DNS addressing the lack of a public agent discovery framework. ANS provides a protocol-agnostic registry infrastructure that leverages...

RHEL 8 / 9 : updated discovery-cli RPMs (Important) (RHSA-2025:7630)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7630 advisory. New version of Discovery CLI dsc and installer are now available for RHEL 8 and RHEL 9 for Discovery 1.14. Tenable has extracted the preceding...

CVE-2025-32407

creationtimestamp| type| source ---|---|--- 2025-05-14 18:55:53+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/36789 2025-05-16 20:34:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16754 2025-08-03 21:02:51+00:00| seen|...