PT-2025-13450

Name of the Vulnerable Software and Affected Versions HGW-BL1500HM versions prior to 002.002.003 Description A Path Traversal issue exists in the file/folder listing process of the USB storage file-sharing function. This issue can be exploited by sending a crafted HTTP request to specific functio...

PT-2025-13449

Name of the Vulnerable Software and Affected Versions HGW-BL1500HM versions 002.002.003 and earlier Description A cross-site scripting issue exists in the USB storage file-sharing function. This could allow an arbitrary script to be executed on the web browser of a user accessing the configuratio...

PT-2025-13453

Name of the Vulnerable Software and Affected Versions HGW-BL1500HM versions 002.002.003 and earlier Description The issue is related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal', in the file deletion process of the USB storage file-sharing functio...

CVE-2025-27718: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in the file upload process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered or...

CVE-2025-27574: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the configuration page or functions accessible only...

KDDI HGW BL1500HM 路径遍历漏洞

The KDDI HGW BL1500HM is a home router from KDDI Japan. A path traversal vulnerability exists in KDDI HGW BL1500HM 002.002.003 and earlier versions, which stems from path traversal in the USB storage file sharing feature and could lead to the acquisition or modification of files...

MISP 安全漏洞

MISP is an open source software solution from MISP Open Source. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.193...

USN-7382-1 linux-oem-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...

UBUNTU-CVE-2023-53008

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential memory leaks in session setup Make sure to free cifsses::authkey.response before allocating it as we might end up leaking memory in reconnect or mounting...

USN-7379-1 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-6.11, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86...

SUSE CVE-2025-27609

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a request that, once transmitted to a victim's Icinga Web, allows to embed arbitrary Javascript into it and to act on...

CVE-2025-27551

creationtimestamp| type| source ---|---|--- 2025-03-26 11:25:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8831 2025-03-26 13:53:30+00:00| seen| https://t.me/cvedetector/21176 2025-08-10 18:27:45+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:48:00+00:00| seen|...

Security Bulletin: B2B API of IBM Sterling B2B Integrator is vulnerable to Cross Origin Resource Sharing (CORS) (CVE-2021-38928)

Summary IBM Sterling B2B Integrator has addressed the Cross Origin Sharing vulnerability in B2B API Vulnerability Details CVEID:CVE-2021-38928 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged...

Security Bulletin: IBM Robotic Process Automation is vulnerable to cross origin resource shareing using the bot api (CVE-2022-41294)

Summary IBM Robotic Process Automation is vulnerable to cross origin resource sharing using the bot api. Vulnerability Details CVEID:CVE-2022-41294 DESCRIPTION: IBM Robotic Process Automation is vulnerable to cross origin resource sharing using the bot api. CVSS Base score: 6.5 CVSS Temporal Scor...

The vulnerability of the File Sharing function on the administrator web panel of microprogramming router software GL.iNet GL-MT3000 allows a hacker to read arbitrary files.

The vulnerability of the File Sharing function on the administrator web panel of the GL.iNet GL-MT3000 router software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to read arbitrary files...

CVE-2025-2740

creationtimestamp| type| source ---|---|--- 2025-03-25 07:24:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8624 2025-03-25 08:01:13+00:00| published-proof-of-concept| Telegram/1huWIRueQzufqMISTEPMEyKE3aRIFqK3qoq5n6GjRtUUGx0 2025-03-25 09:27:27+00:00| seen|...

CVE-2025-2706

creationtimestamp| type| source ---|---|--- 2025-03-24 22:35:13+00:00| seen| https://t.me/cvedetector/20999 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-30163

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Node based network policies "fromNodes" and "toNodes" will incorrectly permit traffic to/from non-node endpoints that share the labels specified in "fromNodes" and "toNodes" sections of network policies. No...

Cilium 安全漏洞

Cilium is an open source software from Cilium Open Source. It is used to provide and transparently secure network connectivity and load balancing between application workloads such as application containers or processes. A security vulnerability exists in Cilium versions v1.16.0 through v1.16.7 a...

GNUnet P2P Framework 0.24.0

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...