The vulnerability of the SenaryAudio driver, a microprogramming software for Huawei YutuFZ-5651S1 personal computers, allows a hacker to bypass existing security restrictions and execute arbitrary system processes.

The vulnerability of the SenaryAudio driver in Huawei YutuFZ-5651S1 personal computers is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and execute arbitrary system processes...

AlmaLinux 8 : thunderbird (ALSA-2025:13676)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:13676 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefox...

Crypto24 Ransomware Group Blends Legitimate Tools with Custom Malware for Stealth Attacks

Crypto24 is a ransomware group that stealthily blends legitimate tools with custom malware, using advanced evasion techniques to bypass security and EDR technologies...

Vulnerabilities fixed in Adobe Commerce and Magento

Adobe has fixed vulnerabilities in Adobe Commerce and Magento Versions 2.4.9-alpha1 and earlier. The vulnerabilities are in the way Adobe Commerce handles security measures. Attackers with elevated privileges can exploit a stored Cross-Site Scripting XSS vulnerability by injecting malicious scrip...

The vulnerability of the IBM Planning Analytics Local software for managing business efficiency lies in the incorrect restriction on the path to the restricted catalog. This allows attackers to bypass security restrictions and gain access to delete any arbitrary files.

The vulnerability of the IBM Planning Analytics Local software for managing business efficiency is related to an incorrect restriction on the path name in the restricted access directory. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain access to...

The vulnerability of the 7-Zip file archiver lies in the improper handling of symbolic links before accessing a file, allowing attackers to circumvent security restrictions.

The vulnerability of the 7-Zip file archiver is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability allows an attacker to circumvent security restrictions...

7-Zip < 25.01

The version of 7-Zip installed on the remote host is prior to 25.01. It is, therefore, affected by a security bypass vulnerability. The code for handling symbolic links has been changed to provide greater security when extracting files from archives. Command line switch -snld20 can be used to...

NVIDIA Merlin Transformers4Rec 代码注入漏洞

NVIDIA Merlin Transformers4Rec is a software for building serialized and conversational recommender systems from NVIDIA. NVIDIA Merlin Transformers4Rec suffers from a code injection vulnerability, which originates from a Python dependency, that can be exploited by an attacker to perform malicious...

NVIDIA Isaac-GR00T 代码注入漏洞

NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. The NVIDIA Isaac-GR00T suffers from a code injection vulnerability, which originates in a Python component, that can be exploited by an attacker to perform malicious operations and compromise system stability by bypassing security...

ImageMagick 输入验证错误漏洞

ImageMagick is ImageMagick open source suite of open source image processing software that can read, convert or write images in a variety of formats. ImageMagick suffers from an input validation error vulnerability that stems from an insecure magnification size calculation in ReadOneMNGIMage, whi...

ROS-20250813-08

A vulnerability in the Java dnsjava DNS implementation is related to incorrect response checking during processing of DNS queries. Exploitation of the vulnerability could allow a remote attacker to bypass the implemented security restrictions. enforced security restrictions...

CVE-2025-36124

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

CVE-2025-36124

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

CVE-2025-36124

CVE-2025-36124 is described by IBM security bulletins as a vulnerability in IBM WebSphere Liberty/Liberty-based IBM products where a remote attacker could bypass security restrictions due to JMS messaging configuration not being honored. Connected IBM bulletins show affected products/versions and...

CVE-2025-36124 IBM WebSphere Application Server Liberty bypass security

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

GHSA-H4F4-GV6H-X824 Magento vulnerable to path traversal

Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerabilit...

GHSA-WCMW-8XPP-RWFJ Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability by manipulating the timing...

Magento vulnerable to path traversal

Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerabilit...

Magento has incorrect authorization issue that leads to arbitrary file system read

Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized...

Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability by manipulating the timing...