27403 matches found
CVE-2025-55241 Azure Entra ID Elevation of Privilege Vulnerability
...
From summer camp to grind season
Welcome to this week's edition of the Threat Source newsletter. This is the way the world ends This is the way the world ends This is the way the world ends Not with a bang but a whimper. - T.S. Eliot So this is how Summer Camp 2025 ends, not with a bang but a whimper. We've put the summer behind...
DEBIAN-CVE-2025-38680
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat The buffer length check before calling uvcparseformat only ensured that the buffer has at least 3 bytes buflen 2, buf the function accesses buffer3, requiring at...
UBUNTU-CVE-2025-38680
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat The buffer length check before calling uvcparseformat only ensured that the buffer has at least 3 bytes buflen 2, buf the function accesses buffer3, requiring at...
GHSA-9HP6-4448-45G2
creationtimestamp| type| source ---|---|--- 2025-09-04 15:35:19+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lxzhvz4hvv2d...
CVE-2025-38707
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add sanity check for file name The length of the file name should be smaller than the directory entry size...
CVE-2025-2667
creationtimestamp| type| source ---|---|--- 2025-09-04 15:10:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxzgj2up342r...
Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability
...
Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution
...
New Malware Uses Windows Character Map for Cryptomining
Darktrace reports new malware hijacking Windows Character Map for cryptomining, exposing risks of hidden attacks in everyday software…...
CVE-2025-50224
creationtimestamp| type| source ---|---|--- 2025-09-04 11:25:24+00:00| seen| https://gist.github.com/Darkcrai86/e3c559ca6e0e31addd51baaa217ec618 2025-09-04 12:08:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lxz4esxapyv2 2025-09-08...
Reflecting on Wallarm’s Journey: Growth, Resilience, and What Comes Next
By Ivan Novikov and Stepan Ilyin When we started Wallarm, we focused on the APIs that power modern apps. We built an API-first platform, used AI from day one, and secured early patents in behavior-based detection and automated policy creation. The result: real-time, inline blocking with automatic...
Security Bulletin: The IBM® Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a denial of service with HTTP/2 (CVE-2025-36047)
Summary IBM WebSphere Application Server Liberty is affected by a denial of service with the servlet-3.1, servlet-4.0, servlet-5.0, or servlet-6.0 feature with the HTTP/2 protocol enabled. Following IBM® Engineering Lifecycle Management products are vulnerable to this attack, it has been addresse...
bpf: Reject %p% format string in bprintf-like helpers
...
Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
...
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
...
HDF5 H5FL.c H5FL__reg_gc_list use after free
...
Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c
...