Lucene search
+L

11751 matches found

RedHat Linux
RedHat Linux
•added 2025/06/24 4:28 a.m.•15 views

Moderate: Red Hat Security Advisory: iputils security update

An update for iputils is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

6.5CVSS6.8AI score0.01745EPSS
SaveExploits1References2
AlmaLinux
AlmaLinux
•added 2025/06/24 12:00 a.m.•19 views

Moderate: iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fixes: iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping CVE-2025-47268 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

6.5CVSS6.9AI score0.01745EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/06/23 9:41 p.m.•5 views

Cross-site Scripting (XSS)

Overview changedetection.io is a Website change detection and monitoring service Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper handling of errors in filters. An attacker can execute arbitrary code in the context of a user's browser by injecting maliciou...

7.1CVSS5.5AI score0.00594EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/06/23 8:52 p.m.•22 views

CVE-2025-52558 ChangeDetection.io XSS in watch overview

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting XSS vulnerability. This...

7CVSS0.00594EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/06/23 8:52 p.m.•4 views

CVE-2025-52558 ChangeDetection.io XSS in watch overview

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting XSS vulnerability. This...

7CVSS6.1AI score0.00594EPSS
SaveExploits0References2
Wordfence Blog
Wordfence Blog
•added 2025/06/23 3:55 p.m.•21 views

A Deep Dive into a Modular Malware Family

📢 Calling all Vulnerability Researchers and Bug Bounty Hunters!📢 🌞 Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

6.5AI score
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
•added 2025/06/23 12:00 a.m.•32 views

HPESBNW04885 Rev. 1: HPE Telco Unified OSS Console Assurance Monitoring Service (UOCAM) Using Apache, Remote Elevated Privileges

Potential Security Impact: Local: Input Validation; Remote: Elevated Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Unified OSS Console prior to 3.1.16 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-27427 |...

4.3CVSS6.1AI score0.0064EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/06/22 12:00 a.m.•21 views

SmartHome-Bench: a Comprehensive Benchmark for Video Anomaly Detection in Smart Homes Using Multi-Modal Large Language Models

Video anomaly detection VAD is essential for enhancing safety and security by identifying unusual events across different environments. Existing VAD benchmarks, however, are primarily designed for general-purpose scenarios, neglecting the specific characteristics of smart home applications. To...

7.4AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/06/21 12:00 a.m.•20 views

Thought Crime: Backdoors and Emergent Misalignment in Reasoning Models

Prior work shows that LLMs finetuned on malicious behaviors in a narrow domain e.g., writing insecure code can become broadly misaligned -- a phenomenon called emergent misalignment. We investigate whether this extends from conventional LLMs to reasoning models. We finetune reasoning models on...

6.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/06/21 12:00 a.m.•21 views

A Comprehensive Survey on Underwater Acoustic Target Positioning and Tracking: Progress, Challenges, and Perspectives

Underwater target tracking technology plays a pivotal role in marine resource exploration, environmental monitoring, and national defense security. Given that acoustic waves represent an effective medium for long-distance transmission in aquatic environments, underwater acoustic target tracking h...

6.9AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2025/06/20 10:00 a.m.•18 views

6 Steps to 24/7 In-House SOC Success

Hackers never sleep, so why should enterprise defenses? Threat actors prefer to target businesses during off-hours. That’s when they can count on fewer security personnel monitoring systems, delaying response and remediation. When retail giant Marks & Spencer experienced a security event over...

5.3AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/06/19 3:45 a.m.•12 views

SUSE CVE-2022-49945

In the Linux kernel, the following vulnerability has been resolved: hwmon: gpio-fan Fix array out of bounds access The driver does not check if the cooling state passed to gpiofansetcurstate exceeds the maximum cooling state as stored in fandata-numspeeds. Since the cooling state is later used as...

6.6CVSS6.4AI score0.00238EPSS
SaveExploits0References11
Redos
Redos
•added 2025/06/19 12:00 a.m.•24 views

ROS-20250616-22

A vulnerability in the Zabbix Universal Monitoring System server is related to excessive data output by an by the application. Exploitation of the vulnerability could allow a remote attacker to gain access to potentially sensitive information. to potentially sensitive information. A vulnerability...

7.5CVSS5.1AI score0.00356EPSS
SaveExploits0
Redos
Redos
•added 2025/06/19 12:00 a.m.•11 views

ROS-20250616-25

A vulnerability in the Zabbix Universal Monitoring System server is related to excessive data output by an by the application. Exploitation of the vulnerability could allow a remote attacker to gain access to potentially sensitive information. to potentially sensitive information. A vulnerability...

7.5CVSS5.1AI score0.00356EPSS
SaveExploits0
Redos
Redos
•added 2025/06/19 12:00 a.m.•17 views

ROS-20250616-24

The vulnerability of the Zabbix universal monitoring system web-integrity is related to the failure to take measures to protect the web page structure. the structure of the web page. Exploitation of the vulnerability could allow an attacker acting remotely, conduct a cross-site scripting attack b...

7.5CVSS7.6AI score0.00356EPSS
SaveExploits0
Redos
Redos
•added 2025/06/19 12:00 a.m.•13 views

ROS-20250616-21

A vulnerability in the Zabbix Universal Monitoring System server is related to excessive data output by an by the application. Exploitation of the vulnerability could allow a remote attacker to gain access to potentially sensitive information. to potentially sensitive information. A vulnerability...

7.5CVSS5.1AI score0.00356EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/06/19 12:00 a.m.•19 views

Automated Energy Billing with Blockchain and the Prophet Forecasting Model: a Holistic Approach

This paper presents a comprehensive approach to automated energy billing that leverages IoT-based smart meters, blockchain technology, and the Prophet time series forecasting model. The proposed system facilitates real-time power consumption monitoring via Wi-Fi-enabled ESP32 modules and a mobile...

6.9AI score
SaveExploits0
Redos
Redos
•added 2025/06/19 12:00 a.m.•11 views

ROS-20250616-23

The vulnerability of the Zabbix universal monitoring system web-integrity is related to the failure to take measures to protect the web page structure. the structure of the web page. Exploitation of the vulnerability could allow an attacker acting remotely, conduct a cross-site scripting attack b...

7.5CVSS7.6AI score0.00356EPSS
SaveExploits0
Circl
Circl
•added 2025/06/18 10:41 p.m.•14 views

GHSA-XQ5X-WGCM-3P33

creationtimestamp| type| source ---|---|--- 2025-06-18 22:41:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18814 2025-06-18 22:53:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114706821031041429 2025-06-18 23:00:49+00:00| published-proof-of-concept|...

4.8AI score
SaveExploits0References2
Wiz blog
Wiz blog
•added 2025/06/18 12:00 p.m.•18 views

Cloud Attacks Retrospective: Evolving Tactics, Familiar Entry Points

Let's break down eight attack patterns security teams should be watching in 2025...

7.3AI score
SaveExploits0
Rows per page
Query Builder