CVE-2026-57952 Mythic < 3.4.0.60 - Unauthorized C2 Profile Configuration Access via Unverified Payload UUID

Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints c2profileconfigcheckwebhook, c2profileredirectruleswebhook, c2profilegetiocwebhook, c2profilesamplemessagewebhook that fail to verify payload ownership. An operator in one operation can invoke these...

CVE-2026-57952 Mythic < 3.4.0.60 - Unauthorized C2 Profile Configuration Access via Unverified Payload UUID

Mythic before 3.4.0.60 contains an authorization bypass vulnerability in four REST endpoints c2profileconfigcheckwebhook, c2profileredirectruleswebhook, c2profilegetiocwebhook, c2profilesamplemessagewebhook that fail to verify payload ownership. An operator in one operation can invoke these...

EUVD-2025-209969

In the Linux kernel, the following vulnerability has been resolved: drm/display/dpmst: Add protection against 0 vcpi When releasing a timeslot there is a slight chance we may end up with the wrong payload mask due to overflow if the delayeddestroywork ends up coming into play after a DP 2.1 monit...

CVE-2025-31718

creationtimestamp| type| source ---|---|--- 2025-10-11 01:11:48+00:00| seen| Telegram/UqQdPmHRUZDn7AbkWd47htXy4U14Y8IXcAJlbFWF8YhIPtE...

Xenmobile Certificate based authentication--Unable to push VPN policy to iOS device.

Error : In the software inventory for the device we can see the error “Could not create mobilecofig ” Server logs 2017-02-24T10:35:05.236+0100 | | INFO | http-nio-10080-exec-72 | com.sparus.nps.apple.push.ApplePush | Installing profile /cfg/VPNtest on device 522. 2017-02-24T10:35:05.298+0100 |...