PT-2025-40017

Name of the Vulnerable Software and Affected Versions NVIDIA Delegated Licensing Service affected versions not specified Description The NVIDIA Delegated Licensing Service for all appliance platforms has a flaw that could allow a user or attacker to trigger an authorized action. Exploitation of...

PT-2025-40016

Name of the Vulnerable Software and Affected Versions NVIDIA Delegated Licensing Service affected versions not specified Description The NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection issue. An attacker may be able to cause an authorized action, potentiall...

PT-2025-40015

Name of the Vulnerable Software and Affected Versions NVIDIA Delegated Licensing Service affected versions not specified Description The NVIDIA Delegated Licensing Service for all appliance platforms has a flaw that could allow a user or attacker to trigger an authorized action. Exploitation of...

NewStart CGSL MAIN 6.06 : initscripts Vulnerability (NS-SA-2025-0229)

The remote NewStart CGSL host, running version MAIN 6.06, has initscripts packages installed that are affected by a vulnerability: - rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or...

CVE-2025-30247: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST...

CVE-2025-9899: Cross-Site Request Forgery (CSRF)

The Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the feedsave function. This makes it possible for...

PT-2025-39153

Name of the Vulnerable Software and Affected Versions Lectora affected versions not specified Description A cross-site scripting flaw exists in Lectora courses, potentially impacting e-learning platforms. The issue allows for the injection of malicious scripts into web pages viewed by users. This...

Intel Graphics Software August 2025 Security Update

Intel has informed HP of potential security vulnerabilities for some Intel® Graphics software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge

The phishing-as-a-service PhaaS offerings known as Lighthouse and Lucid has been linked to more than 17,500 phishing domains targeting 316 brands from 74 countries. "Phishing-as-a-Service PhaaS deployments have risen significantly recently," Netcraft said in a new report. "The PhaaS operators...

17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge

The phishing-as-a-service PhaaS offerings known as Lighthouse and Lucid have been linked to more than 17,500 phishing domains targeting 316 brands from 74 countries. "Phishing-as-a-Service PhaaS deployments have risen significantly recently," Netcraft said in a new report. "The PhaaS operators...

How AI-Native Development Platforms Enable Fake Captcha Pages

Cybercriminals are abusing AI-native platforms like Vercel, Netlify, and Lovable to host fake captcha pages that deceive users, bypass detection, and drive phishing campaigns...

AZL-72269 CVE-2023-53383 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 The T241 platform suffers from the T241-FABRIC-4 erratum which causes unexpected behavior in the GIC when multiple transactions are received simultaneously from different...

IOHIDFamily DoS

The vulnerability of the input/output device management component of the IOHIDFamily in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CoreAudio DoS

The vulnerability of the CoreAudio component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS stems from the operation of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause system failures...

CVE-2025-43346

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7 and iPadOS 18.7, iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process...

CVE-2025-43303

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26 and iPadOS 26, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. An app may be able to access sensitive user data...

CVE-2025-43372

The issue was addressed with improved input validation. This issue is fixed in iOS 26 and iPadOS 26, macOS Sonoma 14.8.2, macOS Tahoe 26, tvOS 26, visionOS 26, watchOS 26. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory...

CVE-2025-31255

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26 and iPadOS 26, macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26, tvOS 26, watchOS 26. An app may be able to access sensitive user data...

Intel Graphics Software Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics software, which might allow escalation of privilege, denial of service, or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to...

Vault Enterprise TOTP Bypass

The vulnerability of the Vault Enterprise and Vault Community Edition archiving platforms for corporate information is related to incorrect authentication. Exploiting this vulnerability can allow a malicious actor to bypass the TOTP authentication process...