Congratulations to the top MSRC 2025 Q4 security researchers!

Congratulations to all the researchers recognized in this quarter’sMicrosoft Researcher Recognition Programleaderboard! Thank you to everyone for your hard work and continued partnership to secure customers...

CVE-2025-13281

creationtimestamp| type| source ---|---|--- 2025-12-01 16:37:57+00:00| seen| https://seclists.org/oss-sec/2025/q4/221 2025-12-01 18:15:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6wzun2hi52h 2025-12-02 13:56:03+00:00| seen|...

Top 3 Malware Families in Q4: How to Keep Your SOC Ready

Q3 showed sharp growth in malware activity as Lumma AgentTesla and Xworm drove access and data theft forcing SOC teams toward quicker behavior checks...

CVE-2025-30189

creationtimestamp| type| source ---|---|--- 2025-10-29 16:47:27+00:00| seen| https://seclists.org/oss-sec/2025/q4/97 2025-10-30 01:33:06+00:00| seen| https://schleuss.online/users/vulnbot/statuses/115460537325572111 2025-10-30 02:07:01+00:00| seen|...

GHSA-H4M4-XP33-37MJ Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows an remote non-authenticated...

Progress Telerik Document Processing Libraries 安全漏洞

Progress Telerik Document Processing Libraries is a document processing library from Progress USA. A security vulnerability exists in versions of Progress Telerik Document Processing Libraries prior to 2024 Q4, which originates when importing a document with unsupported functionality can lead to...

Progress Telerik UI 代码问题漏洞

Progress Telerik UI is a suite of UI user interface controls for application development from Progress USA. A code issue vulnerability exists in versions of Progress Telerik UI prior to 2024 Q4 that stems from insecure deserialization and could lead to a code execution attack...

CVE-2018-5280

SonicWall SonicOS on Network Security Appliance NSA 2016 Q4 devices has XSS via the Configure SSO screens...