PrivExchange

This is a proof-of-concept PoC tool for abusing Microsoft Exchange to obtain Domain Admin privileges. The tool, named PrivExchange, requires the Impacket library and can be used to subscribe to push notifications on Exchange Web Services, which will make Exchange connect back to the attacker and...

A Cyberattack Victim Notification Framework

Interesting analysis: When cyber incidents occur, victims should be notified in a timely manner so they have the opportunity to assess and remediate any harm. However, providing notifications has proven a challenge across industry. When making notifications, companies often do not know the true...

CLSA-2025-1757699471 kernel: Fix of 13 CVEs

mm/hugetlb: unshare page tables during VMA split, not before CVE-2025-38084 - hugetlb: unshare some PMDs when splitting VMAs CVE-2025-38084 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - tipc: Fix use-after-free in tipcconnclose. CVE-2025-38464 -...

Linux Distros Unpatched Vulnerability : CVE-2020-28713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via a...

Linux Distros Unpatched Vulnerability : CVE-2021-36403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidden by HTML, which may pose a phishing ris...

Linux Distros Unpatched Vulnerability : CVE-2016-5014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course. CVE-2016-5014 Note that...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

ALSA-2025:15447 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/vkms: Fix use after free and double free on init error CVE-2025-22097 kernel: udmabuf: fix a buf size overflow issue during udmabuf creation CVE-2025-37803 kernel: net/sched: Always...

CVE-2025-48527

In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48527

In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48527

In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48527

In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48527

In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48527

In Android security bulletin details, CVE-2025-48527 is listed under the Framework component as an Information Disclosure (type ID) with High severity. It involves a logic error that could leak hidden work profile notifications, enabling local information disclosure without additional privileges ...

Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.

...

PT-2025-36053

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A logic error in the code may allow for the leakage of hidden work profile notifications, potentially leading to local information disclosure. Exploitation does not require additional execution...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

RHEL 8 : kernel (RHSA-2025:15035)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15035 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: padata: fix UAF in...

MAL-2025-46913 Malicious code in monolith-twirp-notifications-notifyd (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 839538184262ac542c8ff20a2f5c8e1de29137acee4cf16ae1310f8856960426 The OpenSSF Package Analysis project identified 'monolith-twirp-notifications-notifyd' @ 1.2.8 rubygems as malicious. It is considered malicious...

Malicious code in monolith-twirp-notifications-notifyd (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 839538184262ac542c8ff20a2f5c8e1de29137acee4cf16ae1310f8856960426 The OpenSSF Package Analysis project identified 'monolith-twirp-notifications-notifyd' @ 1.2.8 rubygems as malicious. It is considered malicious...