Ubuntu: Security Advisory (USN-7194-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHSA-2025:0064 Red Hat Security Advisory: kernel-rt security update

Bulletin has no description...

CGA-W7W5-364F-67P2

Bulletin has no description...

PT-2025-4560 · Instabot · Instabot

Name of the Vulnerable Software and Affected Versions: Instabot versions n/a through 1.10 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. This means an attacker can trick a user into performing unintended actions on a web...

India Proposes Digital Data Rules with Tough Penalties and Cybersecurity Requirements

The Indian government has published a draft version of the Digital Personal Data Protection DPDP Rules for public consultation. "Data fiduciaries must provide clear and accessible information about how personal data is processed, enabling informed consent," India's Press Information Bureau PIB sa...

PT-2025-1001 · Moxa · Moxa Secure Routers +2

Name of the Vulnerable Software and Affected Versions: Moxa cellular routers, secure routers, and network security appliances versions 3.13.1 and earlier Description: The vulnerability allows OS command injection due to improperly restricted commands, potentially enabling attackers to execute...

PT-2025-1262 · Asus · Asus Router Aicloud

Name of the Vulnerable Software and Affected Versions: ASUS Router AiCloud affected versions not specified Description: An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. The vulnerability is related to the lack o...

PT-2025-2482

Name of the Vulnerable Software and Affected Versions: Rara Theme Perfect Portfolio versions 1.2.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved b...

PT-2024-36764 · Searchiq · Searchiq

Name of the Vulnerable Software and Affected Versions: SearchIQ versions n/a through 4.6 Description: A Cross-Site Request Forgery CSRF issue is found in SearchIQ. This problem impacts versions of SearchIQ up to 4.6. Recommendations: For versions n/a through 4.6, update to a version later than 4....

GHSA-4FWJ-M62Q-PP47 Password Pusher Allows Session Token Interception Leading to Potential Hijacking

Impact A vulnerability has been reported in Password Pusher where an attacker can copy the session cookie before a user logs out, potentially allowing session hijacking. Although the session token is replaced and invalidated upon logout, if an attacker manages to capture the session cookie before...

Password Pusher Allows Session Token Interception Leading to Potential Hijacking

Impact A vulnerability has been reported in Password Pusher where an attacker can copy the session cookie before a user logs out, potentially allowing session hijacking. Although the session token is replaced and invalidated upon logout, if an attacker manages to capture the session cookie before...

DSA-5836-1 xen - security update

Bulletin has no description...

Postman Workspaces Leak 30000 API Keys and Sensitive Tokens

Thousands of Postman workspaces leaked sensitive data like API keys and tokens. Learn best practices to secure your API development environment and protect your organization...

CVE-2024-53153

In the Linux kernel, the following vulnerability has been resolved: PCI: qcom-ep: Move controller cleanups to qcompcieperstdeassert Currently, the endpoint cleanup function dwpcieepcleanup and EPF deinit notify function pciepcdeinitnotify are called during the execution of qcompcieperstassert i.e...

CGA-FJPJ-4QQH-R9MV

Bulletin has no description...

CGA-8744-8F68-67X8

Bulletin has no description...

CGA-J9P8-2MM9-4VWQ

Bulletin has no description...

CGA-QQMW-6363-QG5W

Bulletin has no description...

Rockwell Automation PowerMonitor 1000 Remote

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to perform edit operations, create admin users, perform factory reset, execute arbitrary code, or cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures...

ThreatQuotient ThreatQ Platform

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to perform remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all...