CVE-2025-20111 Cisco Nexus 3000 and 9000 Series Switches Layer 2 Ethernet Denial of Service Vulnerability

A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...

CVE-2025-20111

CVE-2025-20111 affects Cisco Nexus 3000/9000 Series switches (NX-OS standalone). The issue is in health monitoring diagnostics due to improper handling of specific Ethernet frames, allowing an unauthenticated, adjacent attacker to cause the device to reload and undergo DoS. Reported base score 7....

Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability

A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition. This...

DEBIAN-CVE-2022-49565

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trace. 7763.384369 unchecked MSR access error: WRMSR to 0x689 tried to write 0x1fffffff8101349e at rIP: 0xffffffff810704a4...

CVE-2022-49565 perf/x86/intel/lbr: Fix unchecked MSR access error on HSW

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/lbr: Fix unchecked MSR access error on HSW The fuzzer triggers the below trace. 7763.384369 unchecked MSR access error: WRMSR to 0x689 tried to write 0x1fffffff8101349e at rIP: 0xffffffff810704a4...

SMA Solar Sunny Portal 代码问题漏洞

SMA Solar Sunny Portal is a photovoltaic data monitoring platform from SMA Solar, Germany. It is used to monitor PV system operation in real time and to obtain performance data. A code issue vulnerability exists in versions prior to SMA Solar Sunny Portal 19.02.2024, which stems from...

The vulnerability of the WP Sessions Time Monitoring full-automatic content management system plugin allows attackers to execute arbitrary SQL queries.

The vulnerability of the WP Sessions Time Monitoring full-automatic content management system for WordPress exists due to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Background check provider data breach affects 3 million people who may not have heard of the company

Employment screening company DISA Global Solutions has filed a data breach notification after a cyber incident on their network. DISA says a third party had access to its environment between February 9, 2024, and April 22, 2024. The attacker may have accessed over three million files containing...

GHSA-7MX2-6MM5-42M3 vulnerabilities

Vulnerabilities for packages: mysql...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: dive, gcsfuse, vault-csi-provider, cortex, flannel-cni-plugin, kaf, logstash-exporter, kube-state-metrics, tailscale, aws-flb-firehose, temporal-ui-server-fips, cloud-sql-proxy-fips, kubernetes-dashboard-fips, secrets-store-csi-driver-provider-gcp, memcached-exporter...

GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: dive, cortex, flannel-cni-plugin, crane, kargo, nri-kubernetes, cloud-sql-proxy-fips, cloudflared, postgres-operator, smarter-device-manager-fips, weaviate, age, smarter-device-manager, tigera-operator, prometheus-redis-exporter-fips, helm-fips, tekton-chains-fips,...

How to Comply with PCI DSS 4.0 Requirements 6.4.3 and 11.6.1

The countdown to compliance is in its final stretch. With the third and final phase of PCI DSS 4.0 requirements taking effect on March 31, 2025, organizations are under increasing pressure to ensure their client-side security measures meet the new requirements. At Imperva, we’re committed to...

GHSA-G38C-WH3C-5H9R

creationtimestamp| type| source ---|---|--- 2025-02-24 12:05:45+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3liwcoiudqz2q 2025-04-02 14:16:10+00:00| seen| https://bsky.app/profile/tanfonto.wspanialy.eu.ap.brid.gy/post/3lltl6a4sptj2...

Data Leak Exposes TopSec's Role in China's Censorship-as-a-Service Operations

An analysis of a data leak from a Chinese cybersecurity company TopSec has revealed that it likely offers censorship-as-a-service solutions to prospective customers, including a state-owned enterprise in the country. Founded in 1995, TopSec ostensibly offers services such as Endpoint Detection an...

CVE-2025-0352 Rapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key

Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...

Nagios XI 安全漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R1.2.2, which stems from a tool page that does no...

Rapid Response Monitoring My Security Account App 安全漏洞

Rapid Response Monitoring My Security Account App is an account security program from Rapid Response Monitoring. A security vulnerability exists in Rapid Response Monitoring My Security Account App that stems from a failure to validate requested data modifications. An attacker exploiting this...

CVE-2024-27994

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:51+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodsycm625...

PT-2025-7286 · Phpjabbers · Phpjabbers Hotel Booking System

Name of the Vulnerable Software and Affected Versions: PHPJabbers Hotel Booking System version 4.0 Description: A lack of rate limiting in the "Login Section, Forgot Email" feature allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial o...

The vulnerability of the Elastic Defend software’s detection, monitoring, and response mechanisms is related to insufficient handling of exceptional states, allowing attackers to trigger a service failure.

The vulnerability of the software for detecting, monitoring, and responding to Elastic Defend threats is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow attackers to cause service failures...