CVE-2025-11198: Missing Authentication for Critical Function

A Missing Authentication for Critical Function vulnerability in Juniper Networks Security Director Policy Enforcer allows an unauthenticated, network-based attacker to replace legitimate vSRX images with malicious ones. If a trusted user initiates deployment, Security Director Policy Enforcer wil...

EUVD-2020-10232

Malware in sbrugna...

EUVD-2021-2883

Malicious code in bioql PyPI...

EUVD-2023-32597

Malicious code in bioql PyPI...

EUVD-2022-27398

Malicious code in bioql PyPI...

EUVD-2025-21158

Malicious code in bioql PyPI...

EUVD-2024-27382

Malicious code in bioql PyPI...

CVE-2025-52950

A Missing Authorization vulnerability in Juniper Networks Security Director allows an unauthenticated network-based attacker to read or tamper with multiple sensitive resources via the web interface. Numerous endpoints on the Juniper Security Director appliance do not validate authorization and...

CVE-2025-52950: Missing Authorization

A Missing Authorization vulnerability in Juniper Networks Security Director allows an unauthenticated network-based attacker to read or tamper with multiple sensitive resources via the web interface. Numerous endpoints on the Juniper Security Director appliance do not validate authorization and...

CVE-2025-0123

Summary: CVE-2025-0123 affects Palo Alto Networks PAN-OS. Unlicensed administrators can view clear-text data captured via the packet-capture feature in decrypted HTTP/2 data streams on the firewall; HTTP/1.1 streams are not impacted. Exploitation requires access to the management interface and su...

CVE-2025-0114

creationtimestamp| type| source ---|---|--- 2025-03-12 15:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0114 2025-03-12 18:40:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7359 2025-03-12 19:03:21+00:00| seen|...

CVE-2025-0117

creationtimestamp| type| source ---|---|--- 2025-03-12 15:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0117 2025-03-12 18:40:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7358 2025-03-12 19:03:20+00:00| seen|...

Mozilla: Cross-origin POST requests can be made with NPAPI plugins by following 308 redirects

POST requests made by NPAPI plugins, such as Flash, that receive a status 308 redirect response can bypass CORS requirements. This can allow an attacker to perform Cross-Site Request Forgery CSRF attacks. This vulnerability affects Firefox ESR 60.8, Firefox 68, and Thunderbird 60.8...