Bridgestone Confirms Cyberattack Disrupting North American Plants

Bridgestone confirms a cyberattack that disrupted manufacturing plants. This article details the impact on employees, expert analysis, and…...

The vulnerability of the vmci_transport_packet() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the vmcitransportpacket function in the Linux operating system’s kernel is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-35943

Name of the Vulnerable Software and Affected Versions: dotCMS versions 24.03.22 and after Description: A Boolean-based blind SQL injection vulnerability exists in the /api/v1/contenttype endpoint. The endpoint utilizes the sites query parameter, which accepts a comma-separated list of site...

PT-2025-35949

Name of the Vulnerable Software and Affected Versions NVIDIA Mellanox DPDK affected versions not specified Description NVIDIA Mellanox DPDK contains an issue in the Poll Mode Driver PMD that may allow an attacker on a virtual machine VM within the system to potentially disclose information and...

Jaguar Land Rover Cyberattack Disrupts Production and Sales Operations

Jaguar Land Rover is restoring systems after a cyberattack disrupted production and sales, with a hacker group previously…...

Linux Distros Unpatched Vulnerability : CVE-2016-5634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to RBR. CVE-2016-5634 Note...

Linux Distros Unpatched Vulnerability : CVE-2016-3495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB...

Linux Distros Unpatched Vulnerability : CVE-2016-5437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log. CVE-2016-54...

Silver Fox Exploits Microsoft-Signed WatchDog Driver to Deploy ValleyRAT Malware

The threat actor known as Silver Fox has been attributed to abuse of a previously unknown vulnerable driver associated with WatchDog Anti-malware as part of a Bring Your Own Vulnerable Driver BYOVD attack aimed at disarming security solutions installed on compromised hosts. The vulnerable driver ...

Linux Distros Unpatched Vulnerability : CVE-2024-23722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crash...

Amazon Disrupts Russian APT29 Watering Hole Targeting Microsoft Authentication

Amazon has disrupted a Russian APT29 watering hole campaign that used compromised sites to target Microsoft authentication with…...

The vulnerability of the mlx5e_fix_uplink_rep_features function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5efixuplinkrepfeatures function in the Linux operating system is related to a pointer swapping error. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the rxe_create_cq function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the rxecreatecq function in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2025-51667

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...

Linux Distros Unpatched Vulnerability : CVE-2023-22332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 4.4 series, 4.3.0 to 4.3.4 4.3 series, 4.2.0 to 4.2.11 4.2 series, 4.1.0 to 4.1.14 4.1...

Linux Distros Unpatched Vulnerability : CVE-2018-8956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP...

CVE-2025-29899

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...

PT-2025-35193

Name of the Vulnerable Software and Affected Versions: Synology RADIUS Server versions prior to 3.0.27-0139 Description: The application contains a cross-site scripting XSS issue. Remote authenticated users with administrator privileges can read or write limited files in SRM and conduct limited...

CVE-2025-9195

CVE-2025-9195 affects Solidigm DC Products firmware. The vulnerability is due to improper input validation in the firmware, which could allow a local attacker (requires high privileges) to trigger a Denial of Service (A: high). The CVSS from the entry is CVSS3.1: AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A...

CVE-2024-13979 St. Joe ERP System SingleRowQueryConverter SQL Injection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...