Security Bulletin: B2B API of IBM Sterling B2B Integrator is vulnerable to Cross Origin Resource Sharing (CORS) (CVE-2021-38928)

Summary IBM Sterling B2B Integrator has addressed the Cross Origin Sharing vulnerability in B2B API Vulnerability Details CVEID:CVE-2021-38928 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition uses Cross-Origin Resource Sharing CORS which could allow an attacker to carry out privileged...

Security Bulletin: IBM Robotic Process Automation is vulnerable to cross origin resource shareing using the bot api (CVE-2022-41294)

Summary IBM Robotic Process Automation is vulnerable to cross origin resource sharing using the bot api. Vulnerability Details CVEID:CVE-2022-41294 DESCRIPTION: IBM Robotic Process Automation is vulnerable to cross origin resource sharing using the bot api. CVSS Base score: 6.5 CVSS Temporal Scor...

The vulnerability of the File Sharing function on the administrator web panel of microprogramming router software GL.iNet GL-MT3000 allows a hacker to read arbitrary files.

The vulnerability of the File Sharing function on the administrator web panel of the GL.iNet GL-MT3000 router software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to read arbitrary files...

CVE-2025-2740

creationtimestamp| type| source ---|---|--- 2025-03-25 07:24:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8624 2025-03-25 08:01:13+00:00| published-proof-of-concept| Telegram/1huWIRueQzufqMISTEPMEyKE3aRIFqK3qoq5n6GjRtUUGx0 2025-03-25 09:27:27+00:00| seen|...

CVE-2025-2706

creationtimestamp| type| source ---|---|--- 2025-03-24 22:35:13+00:00| seen| https://t.me/cvedetector/20999 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

GNUnet P2P Framework 0.24.0

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

Cilium 安全漏洞

Cilium is an open source software from Cilium Open Source. It is used to provide and transparently secure network connectivity and load balancing between application workloads such as application containers or processes. A security vulnerability exists in Cilium versions v1.16.0 through v1.16.7 a...

CVE-2025-30168

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 and 8.0.2, the 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse...

CVE-2025-2608

creationtimestamp| type| source ---|---|--- 2025-03-22 00:20:14+00:00| seen| https://t.me/cvedetector/20841 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-26500

creationtimestamp| type| source ---|---|--- 2025-03-21 23:20:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8459 2025-03-22 02:00:35+00:00| seen| https://t.me/cvedetector/20845 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2604

creationtimestamp| type| source ---|---|--- 2025-03-21 21:22:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8455 2025-03-22 00:20:15+00:00| seen| https://t.me/cvedetector/20842 2025-03-25 15:23:59+00:00| published-proof-of-concept|...

CVE-2025-2606

creationtimestamp| type| source ---|---|--- 2025-03-21 21:21:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8440 2025-03-22 00:20:15+00:00| seen| https://t.me/cvedetector/20843 2025-03-25 15:24:03+00:00| published-proof-of-concept|...

CVE-2025-2607

creationtimestamp| type| source ---|---|--- 2025-03-21 21:21:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8439 2025-03-22 00:20:16+00:00| seen| https://t.me/cvedetector/20844 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2601

creationtimestamp| type| source ---|---|--- 2025-03-21 20:24:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8427 2025-03-21 22:39:53+00:00| seen| https://t.me/cvedetector/20837 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2602

creationtimestamp| type| source ---|---|--- 2025-03-21 20:24:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8426 2025-03-21 22:39:53+00:00| seen| https://t.me/cvedetector/20838 2025-08-11 18:27:48+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-29641

creationtimestamp| type| source ---|---|--- 2025-03-21 15:19:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8352 2025-03-21 18:29:11+00:00| seen| https://t.me/cvedetector/20823 2025-03-24 18:23:08+00:00| published-proof-of-concept|...

CVE-2025-30168

creationtimestamp| type| source ---|---|--- 2025-03-21 15:19:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8350 2025-03-21 18:29:08+00:00| seen| https://t.me/cvedetector/20820 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-30168 Parse Server has an OAuth login vulnerability

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 7.5.2 and 8.0.2, the 3rd party authentication handling of Parse Server allows the authentication credentials of some specific authentication providers to be used across multiple Parse...

CVE-2025-2591

creationtimestamp| type| source ---|---|--- 2025-03-21 14:19:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8345 2025-03-21 15:58:40+00:00| seen| https://t.me/cvedetector/20810 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...

CVE-2025-2589

creationtimestamp| type| source ---|---|--- 2025-03-21 13:19:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8333 2025-03-21 15:58:42+00:00| seen| https://t.me/cvedetector/20813 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...