CVE-2025-54085 Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

CVE-2025-54085 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to improperly read or change other settings. The...

CVE-2025-54085 Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

CVE-2025-54085 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to improperly read or change other settings. The...

CVE-2025-54085

CVE-2025-54085 is a privilege-escalation vulnerability in the management console of Absolute Secure Access prior to 13.56. Attackers with administrative access and a specific permission set can bypass permissions to read or change other settings. The issue is characterized by low impact to confid...

CVE-2025-49084

CVE-2025-49084 affects Absolute Secure Access management console prior to version 13.56. An administrator can overwrite policy rules without permissions due to a privilege-bypass issue (low integrity impact). Initial and connected sources describe high subsequent-system impact on confidentiality ...

CVE-2025-49084 Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

CVE-2025-49084 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access can overwrite policy rules without the requisite permissions. The attack complexity is low, attack requirements are present, privileges required are...

CVE-2025-49084 Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

CVE-2025-49084 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access can overwrite policy rules without the requisite permissions. The attack complexity is low, attack requirements are present, privileges required are...

CVE-2025-49083 Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56. Attackers with administrative access to the console can cause unsafe content to be deserialized and executed in the security context of the console. The attack...

CVE-2025-49083 Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56

CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56. Attackers with administrative access to the console can cause unsafe content to be deserialized and executed in the security context of the console. The attack...

CVE-2025-49083

CVE-2025-49083 describes a data deserialization vulnerability in the management console of Absolute Secure Access (versions 12.00 up to 13.55). With high privileges and no user interaction , an attacker with administrative console access can deserialize and execute unsafe content in the console’s...

CISCO-SA-20190513-SECUREBOOT

creationtimestamp| type| source ---|---|--- 2025-07-30 03:49:44+00:00| seen| https://gist.github.com/iseki0/cde82900ce5cf723909622f903fd261b 2026-08-09 05:11:07+00:00| seen| Telegram/7Dig03ZzYy6YuIMrxr0eoO8Sk-WmRTHI4lqpQ9NI8qVQ 2026-08-10 00:00:09+00:00| seen|...

[SECURITY] Fedora 41 Update: cloud-init-24.2-4.fc41

Cloud-init is a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install ssh keys and to let the user run various scripts...

[SECURITY] Fedora 42 Update: cloud-init-24.2-5.fc42

Cloud-init is a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install ssh keys and to let the user run various scripts...

PT-2025-31455 · Absolute · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions 12.01 through 13.55 Description: The management console of Absolute Secure Access is susceptible to an issue where attackers possessing administrative privileges can trigger the deserialization and execution of...

PT-2025-31456 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.56 Description: Attackers with administrative access can overwrite policy rules without the necessary permissions. The issue impacts the confidentiality and availability of subsequent systems, and h...

PT-2025-33759

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a cache coherency vulnerability within the x86/sev subsystem related to Secure Nested Paging SNP memory validation. The issue requires cache line eviction...

Important: java-17-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15,...

Secure Coding for Web Applications: Frameworks, Challenges, and the Role of LLMs

Secure coding is a critical yet often overlooked practice in software development. Despite extensive awareness efforts, real-world adoption remains inconsistent due to organizational, educational, and technical barriers. This paper provides a comprehensive review of secure coding practices across...

Cisco Secure Email Gateway HTTP Response Splitting XSS (cisco-sa-esa-http-split-GLrnnOwS)

According to its self-reported version, Cisco Secure Email Gateway is affected by a vulnerability. - A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attac...

FreeBSD : Mozilla -- cookie shadowing (5abc2187-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5abc2187-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: Setting a nameless cookie with an equals sign in the value shadowed other...

Maka GPS Marbella KR8s 安全漏洞

Maka GPS Marbella KR8s is a car recorder from Maka GPS Singapore. A security vulnerability exists in Maka GPS Marbella KR8s version 2.0.8, which originates from a password written in clear text to the SD card...