The vulnerability of the libvpx library used by Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the libvpx library used by Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the `property.c` component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the property.c component in the Linux operating system’s kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the Squashfs component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the Squashfs component in Linux operating systems is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

Discover how automatic attack disruption protects critical assets while ensuring business continuity

Traditional security solutions often operate in a one-size-fits-all alert model that treats every detection equally, regardless of how important the asset is. But not all assets are equal. Critical assets are systems governing access, identity, or sensitive data. They are essential to an...

CVE-2025-47272 PhoenixCart Vulnerable to Account Deletion Without Password Confirmation

The CE Phoenix eCommerce platform, starting in version 1.0.9.7 and prior to version 1.1.0.3, allowed logged-in users to delete their accounts without requiring password re-authentication. An attacker with temporary access to an authenticated session e.g., on a shared/public machine could...

CVE-2025-47272

The CE Phoenix eCommerce platform, starting in version 1.0.9.7 and prior to version 1.1.0.3, allowed logged-in users to delete their accounts without requiring password re-authentication. An attacker with temporary access to an authenticated session e.g., on a shared/public machine could...

CVE-2025-47272 PhoenixCart Vulnerable to Account Deletion Without Password Confirmation

The CE Phoenix eCommerce platform, starting in version 1.0.9.7 and prior to version 1.1.0.3, allowed logged-in users to delete their accounts without requiring password re-authentication. An attacker with temporary access to an authenticated session e.g., on a shared/public machine could...

CVE-2025-47272: Missing Authentication for Critical Function

The CE Phoenix eCommerce platform, starting in version 1.0.9.7 and prior to version 1.1.0.3, allowed logged-in users to delete their accounts without requiring password re-authentication. An attacker with temporary access to an authenticated session e.g., on a shared/public machine could...

The vulnerability of the `squashfs_read_xattr_id_table()` function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the squashfsreadxattridtable function in the Linux kernel is related to read errors outside of the allowed range. Exploiting this vulnerability can allow an attacker to cause a service failure...

Cybercriminals Target AI Users with Malware-Loaded Installers Posing as Popular Tools

Fake installers for popular artificial intelligence AI tools like OpenAI ChatGPT and InVideo AI are being used as lures to propagate various threats, such as the CyberLock and LuckyGh0$t ransomware families, and a new malware dubbed Numero. "CyberLock ransomware, developed using PowerShell,...

PT-2025-23214 · Instantel · Instantel Micromate

Name of the Vulnerable Software and Affected Versions: Instantel Micromate affected versions not specified Description: The issue concerns a lack of authentication on a configuration port in Instantel Micromate devices, which could allow an attacker to execute commands if connected. This...

The vulnerability of the “Uploading user list from CSV file” function in the VideoGrace videoconferencing software allows a perpetrator to cause service failure.

The vulnerability of the “Uploading user list from CSV file” function in the VideoGrace videoconferencing software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by uploading a specially crafted file...

The vulnerability of the formSafeEmailFilter() function in the Tenda FH451 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSafeEmailFilter function in the Tenda FH451 router software lies in the lack of data cleaning measures at the management level when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

The vulnerabilities of the s390/cpum_sf components of the Linux operating system’s kernel allow attackers to cause service failures.

The vulnerability of the s390/cpumsf components in Linux operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the qede_build_skb() function in the drivers/net/ethernet/qlogic/qede/qede_fp.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the qedebuildskb function in the drivers/net/ethernet/qlogic/qede/qedefp.c module of the Linux kernel is related to incorrect error handling. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `opap_iommu_probe_device()` function in the drivers/iommu/omap-iommu.c kernel module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the opapiommuprobedevice function in the drivers/iommu/omap-iommu.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the spin_lock_irqsave() function in the drivers/infiniband/sw/rdmavt/qp.c module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the spinlockirqsave function in the drivers/infiniband/sw/rdmavt/qp.c module of the Linux kernel is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Poppler library for displaying PDF files, related to reading beyond the buffer boundary in the JBIG2Bitmap::combine() function, allows a hacker to cause a service failure.

The vulnerability of the Poppler library for displaying PDF files relates to the reading beyond the buffer boundary in the JBIG2Bitmap::combine function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `ocfs2_get_init inode()` function in the fs/ocfs2/namei.c module of the OCFS2 cluster file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ocfs2getinit inode function in the fs/ocfs2/namei.c module of the OCFS2 cluster file system in the Linux kernel is related to exception handling flaws. Exploiting this vulnerability could allow an attacker to cause service failures...