Ubuntu: Security Advisory (USN-7588-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-23171

The Versa Director SD-WAN orchestration platform provides an option to upload various types of files. The Versa Director does not correctly limit file upload permissions. The UI appears not to allow file uploads but uploads still succeed. In addition, the Versa Director discloses the full filenam...

Understanding the Theoretical Guarantees of DPM

In this study, we conducted an in-depth examination of the utility analysis of the differentially private mechanism DPM. The authors of DPM have already established the probability of a good split being selected and of DPM halting. In this study, we expanded the analysis of the stopping criterion...

PT-2025-26581 · Code Projects · Code-Projects Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management System version 1.0 Description: A critical issue affects the processing of the file /php action/fetchSelectedCategories.php. The manipulation of the categoriesId argument leads to SQL injection. The attack m...

Medium: python3.11

Issue Overview: There is an issue in CPython when using bytes.decode"unicodeescape", error="ignore|replace". If you are not using the "unicodeescape" encoding or an error handler your usage is not affected. To work-around this issue you may stop using the error= handler and instead wrap the...

PT-2025-26534 · Sangfor · Sangfor Atrust

Name of the Vulnerable Software and Affected Versions: Sangfor aTrust versions through 2.4.10 Description: The issue allows users to modify the ExecStartPre command. Recommendations: For Sangfor aTrust versions through 2.4.10, consider restricting access to the ExecStartPre command to prevent...

Multi-Domain Anomaly Detection in a 5G Network

With the advent of 5G, mobile networks are becoming more dynamic and will therefore present a wider attack surface. To secure these new systems, we propose a multi-domain anomaly detection method that is distinguished by the study of traffic correlation on three dimensions: temporal by analyzing...

The Amazon Nova Family of Models: Technical Report and Model Card

We present Amazon Nova, a new generation of state-of-the-art foundation models that deliver frontier intelligence and industry-leading price performance. Amazon Nova Pro is a highly-capable multimodal model with the best combination of accuracy, speed, and cost for a wide range of tasks. Amazon...

Advanced Prediction of Hypersonic Missile Trajectories with CNN-LSTM-GRU Architectures

Advancements in the defense industry are paramount for ensuring the safety and security of nations, providing robust protection against emerging threats. Among these threats, hypersonic missiles pose a significant challenge due to their extreme speeds and maneuverability, making accurate trajecto...

Quantum-Hybrid Support Vector Machines for Anomaly Detection in Industrial Control Systems

Sensitive data captured by Industrial Control Systems ICS play a large role in the safety and integrity of many critical infrastructures. Detection of anomalous or malicious data, or Anomaly Detection AD, with machine learning is one of many vital components of cyberphysical security. Quantum...

FOAM: a General Frequency-Optimized Anti-Overlapping Framework for Overlapping Object Perception

Overlapping object perception aims to decouple the randomly overlapping foreground-background features, extracting foreground features while suppressing background features, which holds significant application value in fields such as security screening and medical auxiliary diagnosis. Despite som...

Fedora 41 : python-pycares (2025-c10725fc18)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-c10725fc18 advisory. 4.9.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issue but ha...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to to prototype pollution due to webpack loader-utils ( CVE-2022-37601 )

Summary Potential vulnerabilities in webpack loader-utils module has been identified that may affect IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2022-37601 DESCRIPTION: Prototype pollution vulnerability in function parseQuery in parseQuery....

PT-2025-26404 · Husky · Husky

Name of the Vulnerable Software and Affected Versions: HUSKY versions 1.3.7 and earlier Description: The issue affects the HUSKY software, allowing for PHP Local File Inclusion due to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File...

PT-2025-26376 · Unknown · Simple Sticky Footer

Name of the Vulnerable Software and Affected Versions: Sandor Kovacs Simple Sticky Footer versions 1.3.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-26405 · Ninja Team · Ninja Team File Manager Pro

Name of the Vulnerable Software and Affected Versions: Ninja Team File Manager Pro versions 1.8.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability, specifically Stored XSS. This...

Open Sky, Open Threats: Replay Attacks in Space Launch and Re-Entry Phases

This paper examines the effects of replay attacks on the integrity of both uplink and downlink communications during critical phases of spacecraft communication. By combining software-defined radios SDRs with a real-time channel emulator, we replicate realistic attack conditions on the Orion...

PT-2025-26276 · Unknown · Phpgurukul Emergency Ambulance Hiring Portal

Name of the Vulnerable Software and Affected Versions: PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/bwdates-request-report-details.php. The manipulation of the fromdate and todate...

PT-2025-26475 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: A critical issue has been found, affecting the function formSetEnableWizard of the file /goform/formSetEnableWizard. The manipulation of the argument curTime leads to a stack-based buffer overflow...

Dotnetnuke < 10.0.1 Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects (CVE-2025-52486)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.0.1. It is, therefore, affected by a vulnerability. - DNN.PLATFORM Allows Reflected Cross-Site Scripting XSS in some TokenReplace situations with SkinObjects CVE-2025-52486 Note that...