7590 matches found
Introducing Wiz SAST: Where Code Risk Meets Cloud Context
Modern code runs in complex and distributed cloud environments. Wiz SAST meets this complexity by correlating code flaws with real cloud context–including where workloads run, what they can access, and how exposed they are...
Air fryer app caught asking for voice data (re-air) (Lock and Code S06E24)
This week on the Lock and Code podcast … It's often said online that if a product is free, you're the product, but what if that bargain was no longer true? What if, depending on the device you paid hard-earned money for, you still became a product yourself, to be measured, anonymized, collated,...
PT-2025-48743
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
CVE-2025-65622
Summary of CVE-2025-65622 (Snipe-IT): Snipe-IT versions prior to 8.3.4 are affected by a stored XSS flaw in the Locations “Country” field. An authenticated, low-privilege user can inject JavaScript that executes in another user’s session. Connected advisories corroborate the issue and identify th...
CGA-CHQ2-FV5G-3PF9
Bulletin has no description...
Malicious code in discordhelper-ecr (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 689b1c190dc23f0188a57cac218b8dd66c56ecb77478d9bdac584a8cd111bb9b Package exftrates discord credentials to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-191719 Malicious code in discordhelper-ecr (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 689b1c190dc23f0188a57cac218b8dd66c56ecb77478d9bdac584a8cd111bb9b Package exftrates discord credentials to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Next-Generation MIMO Transceivers for Integrated Sensing and Communications: Unique Security Vulnerabilities and Solutions
Integrated sensing and communications ISAC, which is recognized as a key enabler for sixth generation 6G, has brought new opportunities for intelligent, sustainable, and connected wireless networks. Multiple-input multiple-output MIMO transceiver technology lies at the core of this paradigm,...
How To Hide Your Country Location on X (Twitter) by Switching to Region
X formerly known as Twitter has added a new location detail in its account transparency section. It shows…...
MINI-J7HF-XMMJ-7F55
Bulletin has no description...
MINI-MM4P-GXG9-RQP6
Bulletin has no description...
MINI-MMXC-X572-89HX
Bulletin has no description...
EUVD-2025-197983
A low privileged remote attacker can upload any file to an arbitrary location due to missing file check resulting in remote code execution...
MINI-H87X-V789-82W4
Bulletin has no description...
CVE-2025-41735 Possible arbitrary file upload
A low privileged remote attacker can upload any file to an arbitrary location due to missing file check resulting in remote code execution...
MINI-5RF6-G4HX-QWP2
Bulletin has no description...
kernel: usbnet: ipheth: use static NDP16 location in URB
In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: use static NDP16 location in URB Original code allowed for the start of NDP16 to be anywhere within the URB based on the wNdpIndex value in NTH16. Only the start position of NDP16 was checked, so it was possible f...
CGA-5HF6-6R6P-W83G
Bulletin has no description...
Intel® Rapid Storage Technology Software Advisory
Summary: A potential security vulnerability for the Intel® Rapid Storage Technology software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24327 Description: Insecure inherited permissions fo...