CERTFR-2025-ACT-045

creationtimestamp| type| source ---|---|--- 2025-10-20 13:10:36+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m3mvbm2aoq2y 2025-10-20 13:10:38+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115406656997632462 2025-10-20 14:55:15+00:00| seen|...

CVE-2025-41028

creationtimestamp| type| source ---|---|--- 2025-10-20 10:34:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3mmlaqhmv2s 2025-10-20 11:35:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3mpxlghz52h...

CVE-2025-11948

creationtimestamp| type| source ---|---|--- 2025-10-20 04:35:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3lyil3sj62e 2025-10-20 04:45:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3lyzurbtk2o...

PT-2025-42750

Name of the Vulnerable Software and Affected Versions Lanscope Endpoint Manager versions 9.4.7.1 and earlier Motex LANSCOPE Endpoint Manager versions 9.4.7.2 and earlier Description Lanscope Endpoint Manager Client program and Detection agent has a flaw in how it verifies the source of incoming...

CVE-2025-0277

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

CVE-2025-32324

creationtimestamp| type| source ---|---|--- 2025-10-16 17:51:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/55749 2025-10-16 21:00:05+00:00| published-proof-of-concept| Telegram/k65Luaba8Fo3blOkMXIMaYfKgMppZ09hRCYJGbV4Az32CA...

CVE-2025-0277

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

CVE-2025-0276

HCL BigFix Modern Client Management MCM 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

CVE-2025-0276

HCL BigFix Modern Client Management MCM 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

CVE-2025-10742

creationtimestamp| type| source ---|---|--- 2025-10-16 09:05:11+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3cfp2drfr2s 2025-10-16 09:39:17+00:00| seen| https://gist.github.com/Darkcrai86/32d4a9a99d8767ad9d5cb2893f4908b4...

CVE-2025-0277 HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

CVE-2025-0277

CVE-2025-0277 affects HCL BigFix Mobile 3.3 and earlier. The issue arises from insecure directives in the Content Security Policy (CSP) , enabling an attacker to trick users into performing actions by insufficiently restricting sources of scripts and other content. What is vulnerable: CSP configu...

CVE-2025-0277 HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

EUVD-2025-34725

HCL BigFix Mobile 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

EUVD-2025-34727

HCL BigFix Modern Client Management MCM 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

CVE-2025-0276 HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)

HCL BigFix Modern Client Management MCM 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

CVE-2025-0276 HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)

HCL BigFix Modern Client Management MCM 3.3 and earlier are vulnerable to certain insecure directives within the Content Security Policy CSP. An attacker could trick users into performing actions by not properly restricting the sources of scripts and other content...

CVE-2025-11832

creationtimestamp| type| source ---|---|--- 2025-10-15 20:39:52+00:00| seen| https://sploitus.com/exploit?id=446D9BD0-9578-5735-AEE3-5832BAFECE63 2025-10-15 23:00:12+00:00| published-proof-of-concept| Telegram/8zMrwzbFlaQm9xXLz9w6tSk1EK-PUuGRZ72JVb8lphFHjk 2025-10-16 00:04:29+00:00| seen|...

EUVD-2025-34672

Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from malicious external parties in an unfiltered/unsalted way...

CVE-2025-53868

creationtimestamp| type| source ---|---|--- 2025-10-15 15:31:29+00:00| seen| https://vulnerability.circl.lu/bundle/834a30cc-c06c-49b3-9157-eb77f711c73f 2025-10-16 09:05:24+00:00| seen| https://circl.lu/pub/tr-96/ 2025-10-16 10:12:31+00:00| seen|...