Security Bulletin: IBM JRS (Jazz Reporting Service) uses a web link with untrusted references to an external site.

Summary IBM JRS Jazz Reporting Service uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims' web browser. The web application produces links to untrusted...

CVE-2025-26763

creationtimestamp| type| source ---|---|--- 2025-02-22 16:25:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5035 2025-02-22 17:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114048796331755571 2025-02-22 19:10:17+00:00| seen|...

CVE-2023-51319

creationtimestamp| type| source ---|---|--- 2025-02-20 20:17:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4807 2025-02-20 21:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114038415208279900...

Carrier Block Load

RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious actor to execute arbitrary code with escalated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Disclaimer: This...

CVE-2024-13592

creationtimestamp| type| source ---|---|--- 2025-02-19 08:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdjxrrav2g 2025-02-19 08:40:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4780 2025-02-19 15:39:52+00:00| seen|...

CVE-2025-21702

creationtimestamp| type| source ---|---|--- 2025-02-18 15:18:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihkmthdcy2p 2025-02-18 16:48:54+00:00| seen| https://t.me/cvedetector/18326 2025-02-18 20:35:37+00:00| seen|...

Elseta Vinci Protocol Analyzer

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges and perform code execution on the affected system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such...

CVE-2025-26775

creationtimestamp| type| source ---|---|--- 2025-02-17 12:13:20+00:00| seen| https://infosec.exchange/users/cve/statuses/114019165764888577 2025-02-17 12:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepzbipdh2i 2025-02-17 14:02:09+00:00| seen|...

CVE-2024-6097

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2025-24565

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2gpp2s2s 2025-02-14 15:23:53+00:00| seen| https://infosec.exchange/users/cve/statuses/114002928037634148 2025-02-14 15:45:42+00:00| seen|...

The vulnerability of software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller lies in the lack of a mechanism for generating error reports. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the mechanism for generating error reports. Exploiting these vulnerabilities can allow unauthorized actors to...

Progress Telerik Reporting < 2025 Q1 (19.0.25.211) Information Disclosure

The version of Progress Telerik Reporting installed on the remote Windows host is prior or equal to 2025 QA 19.0.25.211. It is, therefore, affected by an information disclosure vulnerability. Information disclosure is possible by a local threat actor through an absolute path vulnerability. Note...

CVE-2025-25387

creationtimestamp| type| source ---|---|--- 2025-02-13 17:11:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113997690740314430 2025-02-13 17:17:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li36xv4jcz2a 2025-02-13 18:50:22+00:00| seen|...

CVE-2024-36285

creationtimestamp| type| source ---|---|--- 2025-02-12 22:17:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7beveoz2d 2025-02-12 23:28:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113993508042620382...

CVE-2025-0995

creationtimestamp| type| source ---|---|--- 2025-02-12 19:07:27+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113992482587961618 2025-02-13 08:06:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113995544258025325 2025-02-14 23:26:24+00:00| seen|...

CVE-2024-6097

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2024-6097

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2024-6097

Progress Telerik Reporting (Progress) is affected in versions prior to 2025 Q1 (19.0.25.211). The vulnerability is an information disclosure via an absolute path traversal that can be exploited by a local threat actor, as described in multiple sources. The CVE-2024-6097 entry confirms the impact ...

CVE-2024-6097 Absolute Path Traversal Vulnerability

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...