EUVD-2023-25738

Malicious code in bioql PyPI...

EUVD-2023-28881

Malicious code in bioql PyPI...

EUVD-2023-41989

Malicious code in bioql PyPI...

EUVD-2023-25739

Malicious code in bioql PyPI...

EUVD-2023-28869

Malicious code in bioql PyPI...

Product Walkthrough: How Passwork 7 Addresses Complexity of Enterprise Security

Passwork is positioned as an on-premises unified platform for both password and secrets management, aiming to address the increasing complexity of credential storage and sharing in modern organizations. The platform recently received a major update that reworks all the core mechanics. Passwork 7...

Security Bulletin: IBM webMethods Integration is affected by vulnerable swagger-ui library

Summary IBM webMethods Integration - Designer Service Development is affected by vulnerable swagger-ui library. CVE-2018-25031/CWE-20 Vulnerability Details CVEID:CVE-2018-25031 DESCRIPTION: Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a...

[R1] Tenable Patch Management Fixes One Vulnerability

R1 Tenable Patch Management Fixes One Vulnerability Jason Schavel Wed, 09/24/2025 - 14:46 Tenable Patch Management leverages third-party software to help provide underlying functionality. One of the third-party components JRE was found to contain a vulnerability, and an updated version has been...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16 ztp-site-generate container

An update for ztp-site-generate is available for Red Hat OpenShift Container Platform 4.16. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the ztp-site-generate...

Wazuh 4.13.0

Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...

Securing AI Agents: Implementing Role-Based Access Control for Industrial Applications

The emergence of Large Language Models LLMs has significantly advanced solutions across various domains, from political science to software development. However, these models are constrained by their training data, which is static and limited to information available up to a specific date...

Description of the security update for SharePoint Server 2016 Language Pack: September 9, 2025 (KB5002777)

None None...

Hotfix update for Exchange Server Subscription Edition RTM HU2: September 8, 2025 (KB5066373)

None None...

Hotfix update for Exchange Server 2019 CU14 HU7: September 8, 2025 (KB5066371)

None None...

Hotfix update for Exchange Server 2019 CU15 HU4: September 8, 2025 (KB5066372)

None None...

Security Bulletin: Common vulnerabilities discovered in Spark2 executables released with Cloudera Observability on Premises with IBM Version 3.5.3

Summary Cloudera Observability on premises with IBM 3.5.3 ships with Spark 2 executables, however, the application runs on Spark 3. This security bulletin identifies a set of common vulnerabilities found in the Spark 2 libraries. Spark 2 has reached End of Support EOS. Clients are advised to use...

Vulnerabilities fixed in Citrix NetScaler ADC and Gateway

Citrix has fixed vulnerabilities in the NetScaler ADC and Gateway The vulnerabilities are related to memory overflow and improper access control configurations. Malicious parties can exploit the vulnerabilities to cause a Denial-of-Service and potentially execute arbitrary code on the vulnerable...

CVE-2025-49745

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-53728

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an unauthorized attacker to disclose information over a network...

Security Updates for Microsoft Dynamics 365 (on-premises) (August 2025) - CVE-2025-49745

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by a cross-site scripting XSS vulnerability. The vulnerability exists due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker can exploit this, ...