Lucene search
+L

6624 matches found

The Hacker News
The Hacker News
•added 2025/08/29 10:30 a.m.•16 views

Can Your Security Stack See ChatGPT? Why Network Visibility Matters

Generative AI platforms like ChatGPT, Gemini, Copilot, and Claude are increasingly common in organizations. While these solutions improve efficiency across tasks, they also present new data leak prevention for generative AI challenges. Sensitive information may be shared through chat prompts, fil...

5.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/08/29 12:00 a.m.•22 views

The vulnerability of PowerStore T OS’ microprogramming software relates to the use of strictly encrypted authentication data, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the microprogramming software in the PowerStore data storage system for T OS is related to the use of strictly encrypted authentication credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.8AI score0.00312EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2025/08/28 5:00 p.m.•37 views

CVE-2025-31977

CVE-2025-31977 concerns HCL BigFix SM and describes a cryptographic weakness due to weak or outdated encryption algorithms. The documents state that an attacker with network access could decrypt or manipulate encrypted communications under certain conditions. The NVD entry and Red Hat advisory co...

6.5CVSS6.3AI score0.00103EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2025/08/28 8:56 a.m.•19 views

thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...

9.8CVSS7.3AI score0.00588EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/08/28 12:00 a.m.•17 views

PT-2025-35107

Name of the Vulnerable Software and Affected Versions HCL BigFix SM affected versions not specified Description HCL BigFix SM is affected by a sensitive information exposure issue. Internal connections do not use TLS encryption, potentially allowing an attacker unauthorized access to sensitive da...

6.5CVSS6AI score0.00094EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•5 views

CVE-2025-31977: Missing Encryption of Sensitive Data

HCL BigFix SM is affected by cryptographic weakness due to weak or outdated encryption algorithms. An attacker with network access could exploit this weakness to decrypt or manipulate encrypted communications under certain conditions...

6.5CVSS5.8AI score0.00103EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2025/08/27 12:58 p.m.•14 views

thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...

9.8CVSS7.3AI score0.00588EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2025/08/27 12:00 a.m.•19 views

The vulnerability in the web interface of the egOS operating system for Welotec industrial devices allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to the device.

The vulnerability of the egOS web interface for Welotec industrial devices relates to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to the device by creating HS256 tokens...

10CVSS5.8AI score0.00522EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2025/08/26 3:42 p.m.•33 views

thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...

9.8CVSS7.3AI score0.00588EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•3 views

FreeBSD : Mozilla -- memory corruption in GMP (f42ee983-7eb0-11f0-ba14-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f42ee983-7eb0-11f0-ba14-b42e991fc52e advisory. [email protected] reports: An attacker was able to perform memory corruption in the GMP process whic...

9.8CVSS8.3AI score0.00588EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2025/08/25 8:06 a.m.•11 views

thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...

9.8CVSS7.3AI score0.00588EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/08/25 2:07 a.m.•16 views

thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...

9.8CVSS7.3AI score0.00588EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2025/08/25 12:00 a.m.•14 views

The vulnerability of Tenda AC20 router’s microprogramming software, related to the use of strictly encrypted login credentials, allows a intruder to gain unauthorized access to the device.

The vulnerability of Tenda AC20 router’s microprogramming software is related to the use of strictly encrypted authentication credentials. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

2.5CVSS5.8AI score0.00223EPSS
SaveExploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2019-10735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Claws Mail 3.14.1, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub- parts within a crafted multipart email. The encrypted...

4.3CVSS5.5AI score0.0061EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2016-10376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gajim through 0.16.7 unconditionally implements the XEP-0146: Remote Controlling Clients extension. This can be abused by malicious XMPP servers to, for example...

4.5CVSS4.9AI score0.01153EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/22 11:09 a.m.•12 views

OESA-2025-2065 ansible security update

\ Security Fixes: A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.5 and 3.5.5 and 3.6.3 when using modules which decrypts vault files such as assemble...

5.5CVSS6.8AI score0.00364EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/21 11:59 a.m.•16 views

CVE-2025-9179

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...

9.8CVSS6.6AI score0.00588EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2025/08/20 11:33 p.m.•10 views

SUSE CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

7.5CVSS7.2AI score0.00588EPSS
SaveExploits0References11
Qualys Blog
Qualys Blog
•added 2025/08/20 3:00 p.m.•25 views

How Agentic AI Helps with Adaptive Cloud Risk Assessment with Agent Vikram

In fast-moving cloud environments like AWS, security teams face an uncomfortable truth: not every EC2 instance is being scanned, existing tools don’t work across a diverse environment that includes long-lived and ephemeral assets, and visibility is never complete. Qualys research found that over...

6.8AI score
SaveExploits0
AlpineLinux
AlpineLinux
•added 2025/08/19 9:15 p.m.•13 views

CVE-2025-9179

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14,...

9.8CVSS6.7AI score0.00588EPSS
SaveExploits0References10
Rows per page
Query Builder