15011 matches found
Oracle VM VirtualBox Core Unauthorized Access
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2025-41721
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
EUVD-2025-35329
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
CVE-2025-41721 Sauter: Command Injection
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
CVE-2025-41721 Sauter: Command Injection
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
Sauter modu680-AS command injection vulnerability
Sauter modu680-AS is a modular automation station cum web server from Sauter, Switzerland. A command injection vulnerability exists in Sauter modu680-AS that stems from improper neutralization of special elements when adding password-protected self-signed certificates, which could allow an elevat...
ROS-20251022-01
Authentication and authorization module for Apache 2.x HTTP server Modauthopenidc vulnerability is related to an information disclosure. Exploitation of the vulnerability allows an attacker acting remotely to disclose protected information...
WLAN AutoConfig Disclosure
The vulnerability of the WLAN AutoConfig service in the Windows operating system relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
Oracle VM VirtualBox qemuFwCfgMmioRead Component Unauthorized Access
The vulnerability of the qemuFwCfgMmioRead function in the Box/Devices/PC/DevQemuFwCfg.cpp component of the Oracle VM VirtualBox virtualization software is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...
Squid proxy email_err_data Unauthorized Access
The vulnerability of the emailerrdata configuration on the Squid proxy server is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...
The evolving landscape of email phishing attacks: how threat actors are reusing and refining established techniques
Introduction Cyberthreats are constantly evolving, and email phishing is no exception. Threat actors keep coming up with new methods to bypass security filters and circumvent user vigilance. At the same time, established – and even long-forgotten – tactics have not gone anywhere; in fact, some ar...
FreeBSD : Hidden/Protected custom variables are prone to filter enumeration (4553e4b3-addf-11f0-9b8d-40a6b7c3b3b8)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4553e4b3-addf-11f0-9b8d-40a6b7c3b3b8 advisory. Icinga reports: An authorized user with access to Icinga DB Web, can use a custom variable in a filter...
Moxa Network Device Privilege Management
The vulnerability of Moxa network devices with microprogrammed software, such as EDR-G9010, EDR-8010, EDG-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4, is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality...
Tab Component Microsoft Edge Google Chrome Unauthorized Access
The vulnerability of the Tab component in Microsoft Edge and Google Chrome relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Moxa Network Device Authentication Bypass
The vulnerability of Moxa network devices with microprogrammed software, such as EDR-G9010, EDR-8010, EDG-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability can allow unauthorized actors to gain...
Dropbear SSH Module Exposed Information
The vulnerability of the /ssh/authorizedkeys module in the SSH session management software Dropbear is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to expose protected information...
Legacy Chat Component Unauthorized Access
The vulnerability of the Legacy Chat component in the software solution for managing contact centers, MiContact Center Business, is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...
ROS-20251020-03
Jupyter Core vulnerability in Jupyter Notebook interactive development and code execution environment is related to privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information, download and execute code. remotely, disclo...
Qualcomm DSP Service
The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
PyTorch bitwise_right_shift Information Disclosure
The vulnerability of the torch.bitwiserightshift interface in the PyTorch machine learning framework is related to the execution of the operation outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...