Mautic allows Improper Authorization in Reporting API

Summary This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. Improper Authorization: An authorization flaw exists in Mautic's API Authorization implementation. Any...

CVE-2024-47053 Improper Authorization in Reporting API

This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. Improper Authorization: An authorization flaw exists in Mautic's API Authorization implementation. Any authenticated use...

DEBIAN-CVE-2022-49520

In the Linux kernel, the following vulnerability has been resolved: arm64: compat: Do not treat syscall number as ESRELx for a bad syscall If a compat process tries to execute an unknown system call above the ARMNRCOMPATEND number, the kernel sends a SIGILL signal to the offending process...

The vulnerability of software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller lies in the lack of authentication procedures. This allows attackers to bypass security restrictions and gain access to read and modify data.

The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the authentication process. Exploiting these vulnerabilities can allow an attacker to bypass security...

The vulnerability of software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller lies in the use of strictly encrypted accounting data. This allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller lies in the use of rigidly encrypted account data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acces...

Security Bulletin: IBM JRS (Jazz Reporting Service) uses a web link with untrusted references to an external site.

Summary IBM JRS Jazz Reporting Service uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims' web browser. The web application produces links to untrusted...

CVE-2025-26763

creationtimestamp| type| source ---|---|--- 2025-02-22 16:25:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5035 2025-02-22 17:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114048796331755571 2025-02-22 19:10:17+00:00| seen|...

CVE-2023-51319

creationtimestamp| type| source ---|---|--- 2025-02-20 20:17:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4807 2025-02-20 21:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114038415208279900...

Carrier Block Load

RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious actor to execute arbitrary code with escalated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Disclaimer: This...

CVE-2024-13592

creationtimestamp| type| source ---|---|--- 2025-02-19 08:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdjxrrav2g 2025-02-19 08:40:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4780 2025-02-19 15:39:52+00:00| seen|...

CVE-2025-21702

creationtimestamp| type| source ---|---|--- 2025-02-18 15:18:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihkmthdcy2p 2025-02-18 16:48:54+00:00| seen| https://t.me/cvedetector/18326 2025-02-18 20:35:37+00:00| seen|...

Elseta Vinci Protocol Analyzer

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges and perform code execution on the affected system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such...

CVE-2025-26775

creationtimestamp| type| source ---|---|--- 2025-02-17 12:13:20+00:00| seen| https://infosec.exchange/users/cve/statuses/114019165764888577 2025-02-17 12:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepzbipdh2i 2025-02-17 14:02:09+00:00| seen|...

CVE-2024-6097

In Progress® Telerik® Reporting versions prior to 2025 Q1 19.0.25.211, information disclosure is possible by a local threat actor through an absolute path vulnerability...

CVE-2025-24565

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5c2gpp2s2s 2025-02-14 15:23:53+00:00| seen| https://infosec.exchange/users/cve/statuses/114002928037634148 2025-02-14 15:45:42+00:00| seen|...

Progress Telerik Reporting < 2025 Q1 (19.0.25.211) Information Disclosure

The version of Progress Telerik Reporting installed on the remote Windows host is prior or equal to 2025 QA 19.0.25.211. It is, therefore, affected by an information disclosure vulnerability. Information disclosure is possible by a local threat actor through an absolute path vulnerability. Note...

The vulnerability of software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller lies in the lack of a mechanism for generating error reports. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the mechanism for generating error reports. Exploiting these vulnerabilities can allow unauthorized actors to...

CVE-2025-25387

creationtimestamp| type| source ---|---|--- 2025-02-13 17:11:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113997690740314430 2025-02-13 17:17:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li36xv4jcz2a 2025-02-13 18:50:22+00:00| seen|...

CVE-2024-36285

creationtimestamp| type| source ---|---|--- 2025-02-12 22:17:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7beveoz2d 2025-02-12 23:28:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113993508042620382...