30021 matches found
CVE-2025-59339
CVE-2025-59339 affects The Bastion’s session-recording workflow: the osh-encrypt-rsync script rotates and encrypts ttyrec files using GPG keys, but it silently fails to apply signatures even when signing is requested. This can undermine data integrity of archived ttyrec files. Affected component ...
CVE-2025-59339 The Bastion ttyrec files are not signed after encryption by the osh-encrypt-rsync script
The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. Session-recording ttyrec files, may be handled by the provided osh-encrypt-rsync script that is a helper to rotate, encrypt, sign, copy, and optionally move them to a remote storage periodically, i...
CVE-2025-59339 The Bastion ttyrec files are not signed after encryption by the osh-encrypt-rsync script
The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. Session-recording ttyrec files, may be handled by the provided osh-encrypt-rsync script that is a helper to rotate, encrypt, sign, copy, and optionally move them to a remote storage periodically, i...
Security Bulletin: IBM Watsonx BI is affected by use of jose v6.0.10 and was discovered to contain weak encryption
Summary IBM Watsonx BI is affected by use of jose v6.0.10 where the library uses a weak encryption algorithm, allowing an attacker to decrypt sensitive data Vulnerability Details CVEID:CVE-2025-45767 DESCRIPTION: jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a...
mysql: Encryption unspecified vulnerability (CPU Jul 2025)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
From Quantum Hacks to AI Defenses – Expert Guide to Building Unbreakable Cyber Resilience
Quantum computing and AI working together will bring incredible opportunities. Together, the technologies will help us extend innovation further and faster than ever before. But, imagine the flip side, waking up to news that hackers have used a quantum computer to crack your company's encryption...
mysql: Encryption unspecified vulnerability (CPU Jul 2025)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
CVE-2025-57176
On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP port 555 allows unauthenticated file uploads to any writable location on the device. File upload packets use weak encryption metadata only with file contents...
CVE-2025-59410: Missing Encryption of Sensitive Data
Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the code in the scheduler for downloading a tiny file is hard coded to use the HTTP protocol, rather than HTTPS. This means that an attacker could perform a Man-in-the-Middle attack, changing th...
Cybersecurity AI: Humanoid Robots As Attack Vectors
We present a systematic security assessment of the Unitree G1 humanoid showing it operates simultaneously as a covert surveillance node and can be purposed as an active cyber operations platform. Partial reverse engineering of Unitree's proprietary FMX encryption reveal a static Blowfish-ECB laye...
OpenBao secret encryption management system Security Bypass
The vulnerability of the OpenBao encryption and secret management system lies in the improper handling of gaps during the processing of the parameter usernameasalias=true in the LDAP authentication method. Exploiting this vulnerability allows a malicious actor to circumvent existing security...
OpenBao Secret Encryption Management System Auth Bypass Info Disclosure
The vulnerability of the OpenBao encryption and secret management system is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...
OpenBao Encryption Information Disclosure
The vulnerability of the OpenBao encryption and secret management system is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...
OpenBao secret encryption management system authentication bypass
The vulnerability of the OpenBao encryption and secret management system is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...
OpenBao secret encryption management system Information Disclosure
The vulnerability of the OpenBao secret and encryption management system is related to improper elimination of vulnerabilities in the basic TOTP library. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...
OpenBao Privilege Escalation
The vulnerability of the OpenBao encryption and secret management system is related to improper management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
OpenBao Secret Encryption Management System Code Execution
The vulnerability of the OpenBao encryption and secret management system lies in improper handling of code generation, particularly by manipulating the prefixes of logs. Exploiting this vulnerability allows a remote attacker to generate arbitrary codes...
Linux Distros Unpatched Vulnerability : CVE-2022-50341
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: fix oops during encryption When running xfstests against Azure the following oops occurred on an arm64 system Unable to handle kernel write to read-only...
Why Secure Document Editing is More Important than Ever
Secure document editing protects sensitive data with encryption and compliance tools, while reducing costly breaches and building trust,…...
CVE-2022-50341
In the Linux kernel, the following vulnerability has been resolved: cifs: fix oops during encryption When running xfstests against Azure the following oops occurred on an arm64 system Unable to handle kernel write to read-only memory at virtual address ffff0001221cf000 Mem abort info: ESR =...