13516 matches found
Opencast security vulnerabilities
Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. A security vulnerability exists in Opencast versions prior to 17.6 that stems from incorrectly sending hashed global system account credentials, which cou...
Opencast still publishes global system account credentials
Description Opencast prior to versions 17.6 would incorrectly send the hashed global system account credentials ie: org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass when attempting to fetch mediapackage elements included in a mediapackage XML file. A previous...
GHSA-J63H-HMGW-X4J7 Opencast still publishes global system account credentials
Description Opencast prior to versions 17.6 would incorrectly send the hashed global system account credentials ie: org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass when attempting to fetch mediapackage elements included in a mediapackage XML file. A previous...
CVE-2025-8197
Removed by vendor...
U.S. Sanctions Firm Behind N. Korean IT Scheme; Arizona Woman Jailed for Running Laptop Farm
The U.S. Department of the Treasury's Office of Foreign Assets Control OFAC sanctioned a North Korean front company and three associated individuals for their involvement in the fraudulent remote information technology IT worker scheme designed to generate illicit revenues for Pyongyang. The...
ToolShell: a story of five vulnerabilities in Microsoft SharePoint
On July 19–20, 2025, various security companies and national CERTs published alerts about active exploitation of on-premise SharePoint servers. According to the reports, observed attacks did not require authentication, allowed attackers to gain full control over the infected servers, and were...
The Age-Checked Internet Has Arrived
Starting today, UK adults will have to prove their age to access porn online. Experts warn that a global wave of age-check laws threatens to chill speech and ultimately harm children and adults alike...
WordPress Plugin Infility Global Cross-Site Scripting Vulnerability
WordPress is a set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers, WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Infility Global, which stems from improper...
Hackers Exploit Microsoft SharePoint Flaws in Global Breaches
Hackers are exploiting critical SharePoint flaws CVE-2025-53770/53771 to breach global targets, including governments and corporations. Microsoft urges immediate action. Learn about the active attacks and how to protect your network from credential theft and backdoors...
PT-2025-30446 · Undefined · Undefined
Is your SharePoint Server safe? 🛡️ This video in Hindi reveals a critical global cyber attack CVE-2020-53770 & provides crucial steps to secure your data. Don't miss out! https://t.co/95fcHzzBBD sharepointsecurity vulnerability TechNews...
PT-2025-30603 · Undefined · Undefined
ParsedReport CompletenessLow 22-07-2025 CVE-202553770/TOOLSHELL: HUNTING DOWN THE ATTACKER TECHNIQUES &VICTIMS https://theravenfile.com/2025/07/22/cve-2025-53770-toolshell-hunting-down-the-attacker-techniques-victims/ Report completeness: Low Actors/Campaigns: Arcanedoor Threats: Toolshell vuln...
CVE-2025-44652
In Netgear RAX30 V1.0.10.943, the USERLIMITGLOBAL option is set to 0 in multiple bftpd-related configuration files. This can cause DoS attacks when unlimited users are connected...
CVE-2025-44650
In Netgear R7000 V1.3.1.6410.1.36 and EAX80 V1.0.1.701.0.2, the USERLIMITGLOBAL option is set to 0 in the bftpd.conf configuration file. This can cause DoS attacks when unlimited users are connected...
CVE-2025-44653
In H3C GR2200 MiniGR1A0V100R016, the USERLIMITGLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected...
PT-2025-30315
Name of the Vulnerable Software and Affected Versions Netgear RAX30 version 1.0.10.94 3 Description The USERLIMIT GLOBAL option is set to 0 in multiple bftpd-related configuration files, potentially leading to denial-of-service DoS attacks when an unlimited number of users connect. Recommendation...
PT-2025-30316 · H3C · H3C Gr2200 Minigr1A0V100R016
Name of the Vulnerable Software and Affected Versions: H3C GR2200 MiniGR1A0V100R016 Description: The USERLIMIT GLOBAL option is set to 0 in the /etc/bftpd.conf file. This configuration can lead to denial-of-service DoS attacks due to the possibility of unlimited user connections. Recommendations:...
PT-2025-30292 · Trendnet · Trendnet Tpl-430Ap
Name of the Vulnerable Software and Affected Versions: TRENDnet TPL-430AP version FW1.0 Description: The USERLIMIT GLOBAL option is set to 0 in the bftpd-related configuration file, potentially leading to Denial-of-Service DoS attacks when an unlimited number of users connect. Recommendations:...
PT-2025-30289 · NetGear · Netgear R7000 +1
Name of the Vulnerable Software and Affected Versions: Netgear R7000 version 1.3.1.64 10.1.36 Netgear EAX80 version 1.0.1.70 1.0.2 Description: The USERLIMIT GLOBAL option is set to 0 in the bftpd.conf configuration file, potentially leading to Denial-of-Service DoS attacks when an unlimited numb...
TRENDnet TPL-430AP security vulnerabilities
The TRENDnet TPL-430AP is a wireless access point from Trendnet, Inc. A security vulnerability exists in the TRENDnet TPL-430AP FW version 1.0, which stems from the USERLIMITGLOBAL option being set to 0, which could lead to a denial of service attack...