643 matches found
CVE-2025-15219
creationtimestamp| type| source ---|---|--- 2025-12-30 04:34:01+00:00| seen| https://bsky.app/profile/potato.software/post/3mb6jja2qud22 2025-12-30 08:32:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb6wueeqju2c...
Exploit for CVE-2025-14847
Eric Capuano^1 posted an excellent blog regarding Mongo...
LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
The encrypted vault backups stolen from the 2022 LastPass data breach have enabled bad actors to take advantage of weak master passwords to crack them open and drain cryptocurrency assets as recently as late 2025, according to new findings from TRM Labs. The blockchain intelligence firm said...
ReGAIN: Retrieval-Grounded AI Framework for Network Traffic Analysis
Modern networks generate vast, heterogeneous traffic that must be continuously analyzed for security and performance. Traditional network traffic analysis systems, whether rule-based or machine learning-driven, often suffer from high false positives and lack interpretability, limiting analyst...
CVE-2025-60050
creationtimestamp| type| source ---|---|--- 2025-12-18 09:54:15+00:00| seen| https://gist.github.com/Darkcrai86/52023ebf4cfbde503e7048b4085f0f7e...
CVE-2025-64669
creationtimestamp| type| source ---|---|--- 2025-12-12 13:50:28+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7sa7ooc2d24 2025-12-17 15:12:07+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3ma6x4aoh5o2m 2025-12-17 22:27:38+00:00| seen|...
📄 dotCMS 24.04.24 Vulnerability Scanner
dotCMS version 24.04.24 advanced exploitation python scanning script that looks for local file inclusion, data exposure, SQL injection, and more. ============================================================================================================================================= | Title :...
cyber-security-lab-soc-vapt-beginner
Cyber Security Practice Lab — Beginner SOC + VAPT This begin...
CVE-2025-11759
creationtimestamp| type| source ---|---|--- 2025-12-05 13:00:45+00:00| seen| https://gist.github.com/Darkcrai86/d2e0ffd1a4a4410a266499b39ec846db...
CVE-2025-59703
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from t...
CVE-2025-59703
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the...
Quttera Launches “Evidence-as-Code” API to Automate Security Compliance for SOC 2 and PCI DSS v4.0
New API capabilities and AI-powered Threat Encyclopedia eliminate manual audit preparation, providing real-time compliance evidence and instant threat intelligence...
CVE-2025-6195
creationtimestamp| type| source ---|---|--- 2025-11-26 23:36:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kzivoppn2n 2025-11-27 14:45:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m6mmc2leh72h...
What Does BAS Stand For? A Complete Guide
Running generic security tests is like studying for the wrong exam. You might be prepared for something, but not for the threats you’re most likely to face. To build a truly resilient defense, you need to test your controls against the specific tactics, techniques, and procedures that adversaries...
Standardized Threat Taxonomy for AI Security, Governance, and Regulatory Compliance
The accelerating deployment of artificial intelligence systems across regulated sectors has exposed critical fragmentation in risk assessment methodologies. A significant "language barrier" currently separates technical security teams, who focus on algorithmic vulnerabilities e.g., MITRE ATLAS,...
EUVD-2025-198992
Ruijie NBR series routers contain an unauthenticated arbitrary file upload vulnerability via /ddi/server/fileupload.php. The endpoint accepts attacker-supplied values in the name and uploadDir parameters and saves the provided multipart file content without adequate validation or sanitization of...
CVE-2025-12138
creationtimestamp| type| source ---|---|--- 2025-11-21 10:24:59+00:00| seen| https://gist.github.com/Darkcrai86/8892f5fe09a9ed77c3f8774d6debb184 2025-11-21 11:24:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m656asygki2x...
CVE-2022-4982
DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers frame.html and frame.A100.html that accept a path parameter content or sidebar which is not properly validated or canonicalized. An attacker c...
CVE-2022-4984 ZenTao Biz < 6.5, Max < 3.0, & Open Source Edition 16.5/16.5beta1 SQL Injection via user-login.html
ZenTao Biz 6.5, ZenTao Max 3.0, ZenTao Open Source Edition 16.5, and ZenTao Open Source Edition 16.5.beta1 contain an SQL injection vulnerability in the login functionality. The application does not properly validate the account parameter on /zentao/user-login.html before using it in a database...
