8594 matches found
Under The Hoodie: The Pen Test Diaries
Breaking In So You Don’t Have To Each year, Rapid7 penetration testers conduct over 1,000 security assessments, pushing boundaries to expose vulnerabilities before the bad guys do. The mission? Get in, escalate privileges, and own the environment—physically, digitally, or sometimes just by...
From Vulnerability Scanning to Risk Management: The Complete VMDR Advantage
What if your vulnerability management tool did more than just scan and instead helped you take control of cyber risks across your business? CISA defines “vulnerability management” as the process by which organizations identify, analyze, and manage vulnerabilities in a critical service’s operating...
Wordfence Intelligence Weekly WordPress Vulnerability Report (February 10, 2025 to February 16 2025)
Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...
WordPress Yoast SEO Plugin < 2.1 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:yoast:yoastseo"; if description...
Take Command | Rapid7’s 2025 Cybersecurity Summit: First Look at Our Speaker Lineup
Take Command Summit 2025 is shaping up to be one of the most impactful cybersecurity events of the year, bringing together Rapid7’s own security experts alongside leading industry voices for a full day of insights into today’s evolving attack landscape. This virtual summit will offer actionable...
Intruder Enhances Free Vulnerability Intelligence Platform ‘Intel’ with AI-Generated CVE Descriptions
London, United Kingdom, 18th February 2025, CyberNewsWire...
PT-2025-6974
Name of the Vulnerable Software and Affected Versions UniFi Protect affected versions not specified Description The issue is related to the Auto-Adopt Bridge Devices function in the UniFi Protect video surveillance system, which is based on artificial intelligence. It is connected to weaknesses i...
DOGE as a National Cyberattack
In the span of just weeks, the US government has experienced what may be the most consequential security breach in its history--not through a sophisticated cyberattack or an act of foreign espionage, but through official orders by a billionaire with a poorly defined government role. And the...
CISA Releases Twenty Industrial Control Systems Advisories
CISA released twenty Industrial Control Systems ICS advisories on February 13, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-044-01 Siemens SIMATIC S7-1200 CPU Family ICSA-25-044-02 Siemens SIMATIC...
CVE-2025-23359
creationtimestamp| type| source ---|---|--- 2025-02-11 19:39:29+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113986946256894513 2025-02-12 00:58:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113988200059363819 2025-02-12 01:15:58+00:00| seen|...
CVE-2025-26490
Rejected reason: This CVE ID is a duplicate of CVE-2025-26495...
CVE-2025-26491
Rejected reason: This CVE ID is a duplicate of CVE-2025-26494...
CVE-2025-26491
CVE-2025-26491 is a duplicate of CVE-2025-26494 (per the initial description). Connected documents provide concrete details for CVE-2025-26494: a Server-Side Request Forgery (SSRF) vulnerability that allows authentication bypass in Tableau Server, affecting versions 2023.3 through 2023.3.5. The s...
CVE-2025-26490
This CVE ID is rejected/not used and does not represent an active vulnerability entry.
CVE-2025-26490
A vulnerability has been identified in Opcenter Intelligence All versions V2501. Personal access token disclosure vulnerability in Tableau Server. For details go to help.salesforce.com and search for knowledge article id 000390611...
CVE-2025-24867 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (BI Launchpad)
SAP BusinessObjects Platform BI Launchpad does not sufficiently handle user input, resulting in Cross-Site Scripting XSS vulnerability. The application allows an unauthenticated attacker to craft a URL that embeds a malicious script within an unprotected parameter. When a victim clicks the link,...
CVE-2025-0064 Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console)
Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiali...