36974 matches found
CVE-2025-65512
The markdownify-mcp (Model Context Protocol) server is vulnerable to a Server-Side Request Forgery (SSRF) in its webpage-to-markdown conversion feature. Affected versions include v0.0.2 and earlier , though some sources specify versions prior to 0.0.3 . The root cause is improper validation in th...
Barracuda Service Center security vulnerabilities
Barracuda Service Center is a service center software from Barracuda USA. A security vulnerability exists in Barracuda Service Center versions prior to 2025.1.1 that originates from a URL defined in a WSDL under the control of an unauthenticated attacker, which could lead to arbitrary file writin...
PT-2025-50536
Name of the Vulnerable Software and Affected Versions Aqara Hub M2 version 4.3.6 0027 Aqara Hub M3 version 4.3.6 0025 Aqara Camera Hub G3 version 4.1.9 0027 Description Aqara Hub devices do not properly validate server certificates during TLS connections used for discovery services and CoAP gatew...
Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2025-3113638)
Huawei HarmonyOS is a distributed operating system developed independently by Huawei Technologies Co. Huawei HarmonyOS suffers from a denial-of-service vulnerability that originates from a denial-of-service vulnerability in Office Services, which can be exploited by an attacker to cause a...
CVE-2025-65291
Several Aqara Hub devices are vulnerable to man-in-the-middle (MiTM) attacks due to improper server certificate validation during TLS connections . Specifically, the flaw exists in the discovery services and CoAP gateway communications . Affected products and versions include the Hub M2 (4.3.6_00...
CVE-2025-62572
Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally...
CVE-2025-62572
Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally...
EUVD-2025-202240
Out-of-bounds read in Application Information Services allows an authorized attacker to elevate privileges locally...
EU fines X $140m, tied to verification rules that make impostor scams easier
The European Commission slapped social networking company X with a €120 million $140 million fine last week for what it says was a lack of transparency with its European users. The fine, the first ever penalty under the EU's landmark Digital Services Act, addressed three specific violations with...
STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware
Canadian organizations have emerged as the focus of a targeted cyber campaign orchestrated by a threat activity cluster known as STAC6565. Cybersecurity company Sophos said it investigated almost 40 intrusions linked to the threat actor between February 2024 and August 2025. The campaign is...
CVE-2025-66461
FULLBACK Manager Pro provided by GS Yuasa International Ltd. registers two Windows services with unquoted file paths. A user may execute arbitrary code with SYSTEM privilege if he/she has the write permission on the path to the directory where the affected product is installed...
CVE-2025-14253
Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files...
CVE-2025-14254
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2025-14255
Vitals ESP developed by Galaxy Software Services has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...
KB5074204: Security Update for Windows PowerShell (OS Builds 26100.7392 and 26200.7392)
KB5074204: Security Update for Windows PowerShell OS Builds 26100.7392 and 26200.7392 Applies To Windows 11 Enterprise LTSC 2024 Windows 11 Enterprise and Education, version 24H2 Windows 11 Enterprise and Education, version 25H2 For information about Windows update terminology, see types of Windo...
Unity Linux 20.1060a / 20.1070a Security Update: sssd (UTSA-2025-991060)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991060 advisory. A flaw was found in the integration of Active Directory and the System Security Services Daemon SSSD on Linux systems. In default configurations, the Kerberos local...
PT-2025-49838
Name of the Vulnerable Software and Affected Versions Affected products affected versions not specified Description The software does not properly validate TCP sequence numbers in certain situations, accepting a wide range of values. This could allow a remote attacker to disrupt connection...
PT-2025-50194
Name of the Vulnerable Software and Affected Versions Application Information Services affected versions not specified Description An out-of-bounds read issue exists in Application Information Services, potentially allowing a local attacker to gain elevated privileges. The issue allows attackers ...
CVE-2025-59923: Improper Access Control
An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow an authenticated attacker with at least read-only admin permission to obtain the...