CVE-2025-27217

The CVE-2025-27217 entry concerns a Server-Side Request Forgery (SSRF) in the UISP Application. Affected software: UISP Application. Vulnerability: SSRF allowing a user with certain permissions to make requests outside the UISP scope. Root cause: SSF vulnerability within the UISP Application; imp...

PT-2025-34176 · Ubiquiti · Uisp Application

Name of the Vulnerable Software and Affected Versions: UISP Application affected versions not specified Description: A Server-Side Request Forgery SSRF exists in the UISP Application. This issue may allow a malicious actor with certain permissions to make requests outside of the application’s...

Ubiquiti UISP Application 安全漏洞

Ubiquiti UISP Application is an application used by Ubiquiti USA to manage and configure its network devices. A security vulnerability exists in the Ubiquiti UISP Application that originates from server-side request forgery and could result in out-of-scope requests...

Linux Distros Unpatched Vulnerability : CVE-2023-22000

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.44 and Prior t...

Linux Distros Unpatched Vulnerability : CVE-2023-22094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Installer product of Oracle MySQL component: Installer: General. Supported versions that are affected are Prior to 1.6.8. Easily...

Liferay Portal Email Modification Vulnerability via Calendar Portlet

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 GA through update 92 allow any authenticated user to modify the content of emails sent...

CVE-2025-4046

A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization...

CVE-2025-4046 Missing Authorization in Lexmark Cloud Services badge management

A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization...

Linux Distros Unpatched Vulnerability : CVE-2020-12689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any user authenticated within a limited scope trust/oauth/application credential can...

MAL-2025-9085 Malicious code in @malware-test-yucca-moras-pekes-lades/test-mlw3-yucca-moras-pekes-lades (npm)

The package @malware-test-yucca-moras-pekes-lades/test-mlw3-yucca-moras-pekes-lades was found to contain malicious code...

Malicious code in scope-gatsby (npm)

The package scope-gatsby was found to contain malicious code...

Malicious code in test-mlw2-clipt-tuned-troke-scope (npm)

The package test-mlw2-clipt-tuned-troke-scope was found to contain malicious code...

MAL-2025-32808 Malicious code in scope-gatsby (npm)

The package scope-gatsby was found to contain malicious code...

MAL-2025-35092 Malicious code in test-mlw2-clipt-tuned-troke-scope (npm)

The package test-mlw2-clipt-tuned-troke-scope was found to contain malicious code...

MAL-2025-9058 Malicious code in @malware-test-wanly-dunno-nulls-jaups/test-mlw3-wanly-dunno-nulls-jaups (npm)

The package @malware-test-wanly-dunno-nulls-jaups/test-mlw3-wanly-dunno-nulls-jaups was found to contain malicious code...

MAL-2025-8736 Malicious code in @malware-test-judas-nyala-spean-softa/test-mlw3-judas-nyala-spean-softa (npm)

The package @malware-test-judas-nyala-spean-softa/test-mlw3-judas-nyala-spean-softa was found to contain malicious code...

Malicious code in @zalastax/nolb-gooh (npm)

The package @zalastax/nolb-gooh was found to contain malicious code...

MAL-2025-8935 Malicious code in @malware-test-sones-amove-roosa-hyena/test-mlw3-sones-amove-roosa-hyena (npm)

The package @malware-test-sones-amove-roosa-hyena/test-mlw3-sones-amove-roosa-hyena was found to contain malicious code...

CVE-2025-49556

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain...

CISA: Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators

This guidance outlines a process for OT owners and operators to create an asset inventory and OT taxonomy. This process includes defining scope and objectives for the inventory, identifying assets, collecting attributes, creating a taxonomy, managing data, and implementing asset life cycle...