85494 matches found
CVE-2022-50592 Advantech iView < v5.7.04 Build 6425 getInventoryReportData Parameter SQL Injection RCE
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the โgetInventoryReportDataโ parameter to the โNetworkServletโ endpoint...
CVE-2022-50592
CVE-2022-50592 affects Advantech iView prior to v5.7.04 build 6425. The SNMP management tool contains an authentication bypass that enables a SQL injection in the getInventoryReportData parameter of the NetworkServlet endpoint, leading to remote code execution with administrator privileges. This ...
CVE-2022-50592 Advantech iView < v5.7.04 Build 6425 getInventoryReportData Parameter SQL Injection RCE
Advantech iView versions prior to v5.7.04 build 6425 contain a vulnerability within the SNMP management tool that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the โgetInventoryReportDataโ parameter to the โNetworkServletโ endpoint...
Hackers Weaponize Windows Hyper-V to Hide Linux VM and Evade EDR Detection
The threat actor known as Curly COMrades has been observed exploiting virtualization technologies as a way to bypass security solutions and execute custom malware. According to a new report from Bitdefender, the adversary is said to have enabled the Hyper-V role on selected victim systems to depl...
OSV-2025-879 Use-of-uninitialized-value in JS_DefineProperty
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457858149 Crash type: Use-of-uninitialized-value Crash state: JSDefineProperty buildbacktrace JSCallInternal...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990435)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990435 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: betop: check shape of output reports betopffinit only checks the total sum of the report...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990449)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990449 advisory. In the Linux kernel, the following vulnerability has been resolved: ath5k: fix OOB in ath5keepromreadpcalinfo5111 The bug was found during fuzzing. Stacktrace locate...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990398)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990398 advisory. In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series nilfs2: fix potential issues related to reserv...
lakeFS security vulnerability
lakeFS is an open source tool from Treeverse Open Source that converts your object store into a Git-like repository. A security vulnerability exists in lakeFS 1.69.0 and earlier versions, which stems from a lack of authentication in the /api/v1/usage-report/summary endpoint that could lead to the...
About Remote Code Execution โ Windows LNK File (CVE-2025-9491) vulnerability
About Remote Code Execution - Windows LNK File CVE-2025-9491 vulnerability. A vulnerability in the Microsoft Windows shortcut .LNK handling mechanism allows malicious command-line arguments to be hidden in the Target field using whitespace characters, making them invisible to standard tools...
CVE-2025-12388
creationtimestamp| type| source ---|---|--- 2025-11-05 09:36:29+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uqpkqgtru2 2025-11-05 09:45:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4urc53vhz2q...
CVE-2025-12192 The Events Calendar <= 6.15.9 - Sysinfo Key Incorrect Comparison to Unauthenticated Sensitive Information Exposure
The Events Calendar plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 6.15.9. The sysinfo REST endpoint compares the provided key to the stored opt-in key using a loose comparison, allowing unauthenticated attackers to send a boolean value and obtain t...
CVE-2025-12192
CVE-2025-12192 affects The Events Calendar WordPress plugin up to version 6.15.9. The issue stems from the sysinfo REST endpoint performing a loose comparison between the provided key and the stored opt-in key, allowing unauthenticated attackers to trigger the endpoint and retrieve the full syste...
CVE-2025-52565
creationtimestamp| type| source ---|---|--- 2025-11-05 08:57:06+00:00| seen| https://seclists.org/oss-sec/2025/q4/138 2025-11-05 10:35:36+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4uu364gd32h 2025-11-05 14:59:52+00:00| seen|...
SUSE-SU-2025:3945-1 Security update for poppler
This update for poppler fixes the following issues: - CVE-2025-3154: Fixed out-of-bounds array write due to invalid VerticesPerRow bsc1240687...
EUVD-2025-37791
The Popup and Slider Builder by Depicter โ Add Email collecting Popup, Popup Modal, Coupon Popup, Image Slider, Carousel Slider, Post Slider Carousel plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability checks in the "depicter-media-upload" AJAX route in all...