Regex literal in Hurl files are not escaped when exported to HTML, allowing injections

Given this Hurl file: regex.hurl: GET https://foo.com HTTP 200 Asserts jsonpath "$.body" matches // When exported to HTML: $ hurlfmt --out html regex.hurl GET https://foo.com HTTP 200 Asserts jsonpath "$.body" matches // The regex literal // is not escaped: // When opened in a browser, the code i...

Salesforce Industry Cloud Hit by 20 Vulnerabilities Including 0days

AppOmni research reveals over 20 security vulnerabilities, including zero-days, in the Salesforce Industry Cloud. Learn about critical risks, customer responsibilities, and how to protect sensitive data...

Fedora: Security Advisory (FEDORA-2025-70701de9de)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP13 : libxslt (EulerOS-SA-2025-1638)

According to the versions of the libxslt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : xsltGetInheritedNsList in libxslt before 1.1.43 has a use-after-free issue related to exclusion of result prefixes.CVE-2024-55549 numbers.c in...

SUSE: Security Advisory (SUSE-SU-2025:01846-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-4214-1 node-tar-fs - security update

Bulletin has no description...

Microsoft Windows Multiple Vulnerabilities (KB5060533)

This host is missing an important security update according to Microsoft KB5060533 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

GHSA-33P9-3P43-82VQ vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, kubeflow-pipelines-visualization-server...

SUSE-SU-2025:01869-1 Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005568 fixes several issues. The following security issues were fixed: - CVE-2022-49080: mm/mempolicy: fix mpolnew leak in sharedpolicyreplace bsc1238324. - CVE-2024-49855: nbd: fix race between timeout and normal completion bsc1232900. - CVE-2024-5801...

Adobe Releases Patch Fixing 254 Vulnerabilities, Closing High-Severity Security Gaps

Adobe on Tuesday pushed security updates to address a total of 254 security flaws impacting its software products, a majority of which affect Experience Manager AEM. Of the 254 flaws, 225 reside in AEM, impacting AEM Cloud Service CS as well as all versions prior to and including 6.5.22. The issu...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CVE-2025-40658

creationtimestamp| type| source ---|---|--- 2025-06-10 10:33:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17862 2025-06-10 13:18:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lray5zp4d42r...

June 10, 2025—KB5061036 (Security-only update)

None None...

Description of the security update for Office 2016: June 10, 2025 (KB5002730)

None None...

May 13, 2025—KB5058451 (Monthly Rollup)

None None...

CVE-2025-42995

CVE-2025-42995: SAP MDM Server is affected by a vulnerability in the Read function where specially crafted packets can trigger a memory read access violation, causing the server process to fail and exit. The documented impact is high availability disruption with no confidentiality or integrity im...

CVE-2025-42994 Multiple vulnerabilities in SAP MDM Server

SAP MDM Server ReadString function allows an attacker to send specially crafted packets which could trigger a memory read access violation in the server process that would then fail and exit unexpectedly causing high impact on availability with no impact on confidentiality and integrity of the...

QNAP QuTS hero Multiple Vulnerabilities (QSA-25-12)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

Security Vulnerabilities fixed in Thunderbird 139.0.2 — Mozilla

A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data e.g. using /dev/urandom on Linux or to...

Ubuntu 24.04 LTS / 24.10 : AMD Microcode vulnerabilities (USN-7561-1)

The remote Ubuntu 24.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7561-1 advisory. It was discovered that AMD Microcode incorrectly handled memory addresses. An attacker with local administrator privilege could possibly use this...