CVE-2024-6174

When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configurations disable platform enumeration...

PT-2025-26944

Name of the Vulnerable Software and Affected Versions: cloud-init affected versions not specified Description: The issue occurs when a non-x86 platform is detected, causing cloud-init to grant root access to a hardcoded URL with a local IP address. By default, cloud-init configurations disable...

On the Feasibility of Poisoning Text-To-Image AI Models Via Adversarial Mislabeling

Today's text-to-image generative models are trained on millions of images sourced from the Internet, each paired with a detailed caption produced by Vision-Language Models VLMs. This part of the training pipeline is critical for supplying the models with large volumes of high-quality image-captio...

CVE-2025-32975

creationtimestamp| type| source ---|---|--- 2025-06-24 03:29:33+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lsd5rwjf3c22 2025-06-24 03:33:07+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114736233551699855 2025-06-24 05:45:06+00:00| seen|...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to incorrect validity check in the sftpdecodechanneldatatopacket function. An attacker can cause the server to crash by sending specially crafted SFTP packets with payload size field set to value...

A Retrospective on DISPEED -- Leveraging Heterogeneity in a Drone Swarm for IDS Execution

Swarms of drones are gaining more and more autonomy and efficiency during their missions. However, security threats can disrupt their missions' progression. To overcome this problem, Network Intrusion Detection Systems NIDS are promising solutions to detect malicious behavior on network traffic...

The vulnerability of the KVv2 plugin for the Vault Community Edition and Vault Enterprise archiving platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the KVv2 plugin for the Vault Community Edition and Vault Enterprise archiving platform relates to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected informatio...

CVE-2025-38074

creationtimestamp| type| source ---|---|--- 2025-06-18 10:40:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18707 2025-06-18 10:50:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114703977953402514 2025-06-18 11:36:44+00:00| seen|...

CVE-2025-43200

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Fixed the allocation of the cleanest CLOSID on platforms without monitors. Commit: 6eac36bb9eb0 “x86/resctrl: Allocate the cleanest CLOSID by searching for the CLOSID with the fewest dirty cache lines” Added logic th...

CVE-2025-25264

creationtimestamp| type| source ---|---|--- 2025-06-16 10:33:51+00:00| seen| Telegram/rWCmDShs9kyN-Ac2IJ6oBoNksY3QzSzid5WB25gwynslFg 2025-06-16 10:39:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18437 2025-06-16 10:50:27+00:00| seen|...

CVE-2025-2091

An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...

CVE-2025-5964

creationtimestamp| type| source ---|---|--- 2025-06-15 20:39:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18386 2025-06-15 21:00:28+00:00| seen| Telegram/qqGdRq3IEZWlesNnwy1ijPtikCMQVd1aEhfCMytKb8KLZk 2025-06-15 21:06:26+00:00| seen|...

Social Media Is Now a DIY Alert System for ICE Raids

The undocumented migrant community in the United States is using social networks and other digital platforms to send alerts about raids and the presence of immigration agents around the US...

VulnCheck KEV: CVE-2025-43200

Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link...

Researchers Uncover 20+ Configuration Risks, Including Five CVEs, in Salesforce Industry Cloud

Cybersecurity researchers have uncovered over 20 configuration-related risks affecting Salesforce Industry Cloud aka Salesforce Industries, exposing sensitive data to unauthorized internal and external parties. The weaknesses affect various components like FlexCards, Data Mappers, Integration...

CVE-2025-33070

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 19:20:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbmfmeu2f2u 2025-06-10 19:44:10+00:00| seen|...

PT-2025-23952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Envoy side-cars affected versions not specified Description A flaw exists in the Linux kernel related to insufficient validation of extensible ioctls within the pidfs subsystem. This could potential...

Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability

A vulnerability in Amazon Web Services AWS, Microsoft Azure, and Oracle Cloud Infrastructure OCI cloud deployments of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configuration...

CVE-2025-48960

CVE-2025-48960 concerns a weak server key used for TLS encryption affecting Acronis Cyber Protect 16 on Linux, macOS, and Windows before build 39938 . The vulnerability is caused by inadequate key material in the TLS setup, leading to low confidentiality (C) and partial integrity issues (I) per t...