CVE-2025-48960

CVE-2025-48960 concerns a weak server key used for TLS encryption affecting Acronis Cyber Protect 16 on Linux, macOS, and Windows before build 39938 . The vulnerability is caused by inadequate key material in the TLS setup, leading to low confidentiality (C) and partial integrity issues (I) per t...

CVE-2025-48960

Weak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 Linux, macOS, Windows before build 39938...

CVE-2025-5601

creationtimestamp| type| source ---|---|--- 2025-06-04 11:49:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrqejjhuig2 2025-06-04 12:06:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114625005980230275 2025-06-04...

Europol Targets Over 2,000 Extremist Links Exploiting Minors Online

Europol targets extremist online content exploiting minors, tackling rising use of AI, propaganda, and grooming across Europe’s digital platforms...

CVE-2024-36486

creationtimestamp| type| source ---|---|--- 2025-06-03 10:00:19+00:00| seen| https://infosec.place/objects/0b9f0dc9-f468-4b15-a796-956e279da8a4 2025-06-03 10:06:06+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lqp25ovz6r2p 2025-06-03 10:23:15+00:00| seen|...

The vulnerability of the GrantAccessToMultipleFiles interface in the Core Services framework of operating systems macOS, iOS, iPadOS, and tvOS allows a perpetrator to bypass the sandbox protection mechanisms and gain unauthorized access to protected information.

The vulnerability of the GrantAccessToMultipleFiles interface in the Core Services framework of operating systems macOS, iOS, iPadOS, and tvOS is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to bypass the sandbox protection mechanisms and...

GHSA-W6Q7-J642-7C25

creationtimestamp| type| source ---|---|--- 2025-05-30 18:15:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114598146975884055 2025-05-30 18:16:52+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lqftpll67w22...

CVE-2025-4967

creationtimestamp| type| source ---|---|--- 2025-05-29 20:55:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114593112438215240 2025-05-29 21:06:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdmogjodng2 2025-05-29...

The vulnerability of HashiCorp’s Vault and Vault Enterprise archiving platforms relates to errors in the certificate validation process, allowing attackers to bypass the authentication process.

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms relates to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to bypass the authentication process...

The vulnerabilities of HashiCorp’s Vault and Vault Enterprise storage platforms, related to authentication mechanisms’ deficiencies, allow attackers to trigger service interruptions.

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms relates to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2024-51453

creationtimestamp| type| source ---|---|--- 2025-05-28 16:02:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114586299499494242 2025-05-28 16:29:44+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqamry7k4dr2...

How to load unsigned or fake-signed apps on iOS

TL;DR Issues commonly arise when clients provide an application which is unsigned or does not meet device requirements. Installing an application can be challenging without a Mac, access to Xcode or if the client is having trouble signing the application manually as this is normally done by the a...

Intel Core Ultra Processors CNVi Security Update May 2025

Intel has informed HP of a potential security in the Intel® Integrated Connectivity I/O interface CNVi for some Intel® Core™ Ultra Processors, which might allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to...

Intel 2025.1 IPU – 13th and 14th Generation Processors Security Update

Intel has informed HP a potential security vulnerability in some 13th and 14th Generation Intel® Core™ Processors, which might allow denial of service. Intel is releasing microcode and UEFI reference code updates to mitigate this potential vulnerability. Intel has released updates to mitigate the...

Intel 2025.2 IPU - Processors May 2025 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Processors, which might allow denial of service or information disclosure. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

CVE-2025-40650

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17561 2025-05-26 14:08:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3dy3ntmz2a 2025-05-26 15:28:54+00:00| seen|...

CVE-2025-40653

creationtimestamp| type| source ---|---|--- 2025-05-26 13:47:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17559 2025-05-26 13:54:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq3d6j4pzo2e 2025-05-26 15:24:26+00:00| seen|...

CERTFR-2025-ACT-022

creationtimestamp| type| source ---|---|--- 2025-05-26 12:40:53+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lq3734nb3h22 2025-05-26 12:40:54+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114574180514996446...

CVE-2024-3219

The “socket” module provides a pure-Python fallback to the socket.socketpair function for platforms that don’t support AFUNIX, such as Windows. This pure-Python implementation uses AFINET or AFINET6 to create a local connected pair of sockets. The connection between the two sockets was not verifi...

CVE-2024-7517

A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extensio...