Security Bulletin: Flex System Manager (FSM) – June 2013 Java Vulnerabilities

Summary Multiple security vulnerabilities exist in the IBM Java SDK that is shipped with the IBM FSM. Vulnerability Details Abstract Multiple security vulnerabilities exist in the IBM Java SDK that is shipped with the IBM FSM. Content VULNERABILITY DETAILS: CVE ID: CVE-2013-2468 CVSS Base Score:Â...

Vulnerability found in Mitel MiVoice Connect

A vulnerability has been found in the Service Appliance component of MiVoice Connect. This vulnerability allows a remote malicious remote user to execute arbitrary code with the permissions with which the Service Appliance component is running. Mitel has made mitigating measures available to fix...

PT-2022-3186

Name of the Vulnerable Software and Affected Versions TP-Link Archer AX50 AX3000 versions 210730 and older Description The issue is related to insufficient input validation in the implementation of the backup and restore functionality of the TP-Link Archer AX50 AX3000 router's web interface. This...

CVE-2022-25061

creationtimestamp| type| source ---|---|--- 2022-02-25 22:21:00+00:00| seen| https://t.me/cibsecurity/38118 2025-06-04 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lqspc4ebki2o...

CVE-2022-25369

creationtimestamp| type| source ---|---|--- 2022-02-25 11:05:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5488 2025-06-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-06-04 2025-06-06 00:00:00+00:00| exploited| The...

CVE-2021-39312

creationtimestamp| type| source ---|---|--- 2021-12-14 18:15:25+00:00| seen| https://t.me/cibsecurity/33937 2025-06-03 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-03 2025-06-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-05...

CVE-2021-40969

creationtimestamp| type| source ---|---|--- 2021-10-01 20:15:40+00:00| seen| https://t.me/cibsecurity/29826 2023-06-05 12:33:16+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-40969.yaml...

GHSA-GHPQ-VJXW-CH5W Use after free in libpulse-binding

Overview Version 1.2.1 of the libpulse-binding Rust crate, released on the 15th of June 2018, fixed a pair of use-after-free issues with the objects returned by the getformatinfo and getcontext methods of Stream objects. These objects were mistakenly being constructed without setting an important...

Security fix for the ALT Linux 9 package mediawiki version 1.36.1-alt1

1.36.1-alt1 built June 30, 2021 Vitaly Lipatov in task 274917 June 27, 2021 Vitaly Lipatov - new version 1.36.1 with rpmrb script - T280226, CVE-2021-35197: Prevent blocked users from purging pages...

CVE-2021-35941

Western Digital WD My Book Live 2.x and later and WD My Book Live Duo all versions have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472...

CVE-2021-20580

creationtimestamp| type| source ---|---|--- 2021-06-29 20:29:01+00:00| seen| https://t.me/cibsecurity/25792...

VulnCheck KEV: CVE-2021-35941

Western Digital WD My Book Live 2.x and later and WD My Book Live Duo all versions have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472...

Threat Roundup for June 18 to June 25

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 18 and June 25. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral...

CVE-2021-26585

creationtimestamp| type| source ---|---|--- 2021-06-24 16:18:25+00:00| seen| https://t.me/cibsecurity/25675...

CVE-2021-0534

creationtimestamp| type| source ---|---|--- 2021-06-22 14:24:40+00:00| seen| Telegram/3bR6PlhdVeTHSJhS6Lk4MitZSUZigK1I4jZSvcu-c45aLQ...

CVE-2021-23845

This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and has been fixed already starting from...

CVE-2021-23846

When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5, which will be released on the 30th of June, 2021...

CVE-2021-23845 B426 Web Configuration Authentication Bypass

This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and has been fixed already starting from...

Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX), and Jetson Nano (including Jetson Nano 2GB) - June 2021

NVIDIA has released a software update for NVIDIA® Jetson AGX Xavier™ series, Jetson Xavier™ NX, Jetson™ TX1, Jetson TX2 series including Jetson TX2 NX, and Jetson Nano™ devices including Jetson Nano 2GB in the NVIDIA JetPack™ SDK. This update addresses security issues that may lead to escalation ...

CVE-2021-1541

creationtimestamp| type| source ---|---|--- 2021-06-16 22:40:12+00:00| seen| https://t.me/cibsecurity/25502 2026-09-01 20:02:35+00:00| seen| https://t.me/hackingAttack/13348 2026-09-02 01:03:12+00:00| seen| https://t.me/hackingAttack/13348 2026-09-08 03:00:06+00:00| seen|...