HCL AppScan Source Installed (Windows)

Binary data hclappscansourcewininstalled.nbin...

Libraesva Email Security Gateway (ESG) Web UI Detection

Binary data libraesvaemailsecuritygatewaydetect.nbin...

CVE-2025-61740: Origin Validation Error

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device...

CVE-2025-65817: Improper Control of Generation of Code

LSC Smart Connect Indoor IP Camera 1.4.13 contains a RCE vulnerability in startapp.sh...

CVE-2024-25812: Improper Neutralization of Input During Web Page Generation

MyNET up to v26.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the src parameter...

CVE-2025-11544: Hidden Functionality

Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware...

CVE-2025-14018: Unquoted Search Path or Element

Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc. E-Fatura allows Leveraging/Manipulating Configuration File Search Paths, Redirect Access to Libraries. This issue affects e-Fatura: before 1.2.15...

CVE-2025-26379: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets...

CVE-2025-61739: Reusing a Nonce, Key Pair in Encryption

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets...

Photon OS 5.0: Linux PHSA-2025-5.0-0717

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0717. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 42 : util-linux (2025-fc18ab1e37)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-fc18ab1e37 advisory. - fix setpwnam buffer use CVE-2025-14104 - libblkid: use snprintf instead of sprintf Tenable has extracted the preceding description block directly from the...

Photon OS 4.0: Linux PHSA-2025-4.0-0930

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0930. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2025-5.0-0715

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0715. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Metasploit Wrap-Up 12/19/2025

React2Shell Payload Improvements Last week Metasploit released an exploit for the React2Shell vulnerability, and this week we have made a couple of improvements to the payloads that it uses. The first improvement affects all Metasploit modules. When an exploit is used, an initial payload is...

CVE-2025-65035: Deserialization of Untrusted Data

pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. Prior to version 1.1.2, in certain conditions database write access must first be obtained through another vulnerability or misconfiguration...

HDF5 Installed (Linux)

Binary data hdf5nixinstalled.nbin...

CVE-2025-14881: Authorization Bypass Through User-Controlled Key

Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only...

CVE-2025-14882: Authorization Bypass Through User-Controlled Key

An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only...

CVE-2025-52692: Missing Authentication for Critical Function

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials...

CVE-2023-53957: Sensitive Cookie with Improper SameSite Attribute

Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malicious exploitation. Attackers can trick victims into executing a crafted PHP script that captures and writes session cookie information to a file, enabling potential session...