Remote Code Execution (RCE)

umbraco.headless.client.net is vulnerable to Remote Code Execution RCE. The vulnerability is due to the use of an insecure Refit package, allows an attacker to exploit the insecure Refit dependency...

BELL-CVE-2025-21657

Bulletin has no description...

BELL-CVE-2024-57939

Bulletin has no description...

BELL-CVE-2024-57933

Bulletin has no description...

BELL-CVE-2024-57932

Bulletin has no description...

CVE-2024-55957

In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control Software ICSW before 3.1 SP10, the driver packages have a local privilege escalation vulnerability due to improper access control permissions on Windows systems...

CVE-2023-37002

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an E-RAB Modification Indication message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...

CVE-2023-37006

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a Handover Request Ack message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...

CVE-2023-37017

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an S1Setup Request message missing a required Global eNB ID field to repeatedly crash the MME, resulting in denial of service...

CVE-2025-21569

...

CVE-2025-21560

CVE-2025-21560 affects Oracle Agile PLM Framework (component: SDK) with vulnerable 9.3.6. A low-privilege, network-access attacker (HTTP) can compromise the framework, potentially gaining unauthorized access to critical data or all data accessible by Oracle Agile PLM Framework. Concrete details f...

CVE-2025-21553

CVE-2025-21553 affects Oracle Database Server Java VM. Affected versions: 19.3–19.25, 21.3–21.16, 23.4–23.6. The issue enables a low-privilege user with Create Session/Create Procedure and network access via Oracle Net to compromise the Java VM, potentially enabling unauthorized updates/deletes a...

CVE-2025-21545

...

CVE-2025-21537

...

CVE-2025-21508

...

CVE-2025-21504

CVE-2025-21504 affects Oracle MySQL Server (Server: Optimizer). Affects MySQL 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. An attacker with high privileges can leverage network access via multiple protocols to cause a hang or crash (DoS). CVSS v3.1 base score 4.9 (Availability). ...

CVE-2025-21493

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2025-21489

...

MAL-2025-613 Malicious code in ethweb-set (npm)

This package exfiltrates cryptocurrency wallet files to an attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7af171b00090d3b3bfefae279da101b5da3a93390bc9f2cce869bdbc8685cbf Any computer that has this package installed or running should be...

CVE-2025-24011 Umbraco CMS Vulnerable to User Enumeration Feasible Based On Management API Timing and Response Codes

Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, it's possible to determine whether an account exists based on an analysis of response codes and timing of Umbraco management API responses. Versions 14.3.2 and...