CVE-2025-49860 WordPress Majestic Support plugin <= 1.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support.This issue affects Majestic Support: from n/a through = 1.1.0...

CVE-2025-49860

CVE-2025-49860 — WordPress Majestic Support plugin: Affected versions up to 1.1.0 suffer a Missing Authorization/Broken Access Control vulnerability. Root cause: insufficient authorization checks in Majestic Support. CVSS 3.1 vector shows low confidentiality impact and no integrity/availability i...

Qualcomm BIOS Vulnerabilities - Lenovo Support US

No description provided...

Qualcomm BIOS Vulnerabilities - Lenovo Support US

No description provided...

Lenovo XClarity Orchestrator (LXCO) Vulnerability - Lenovo Support US

No description provided...

MediaTek Tablet Vulnerabilities - Lenovo Support US

No description provided...

MediaTek Tablet Vulnerabilities - Lenovo Support US

No description provided...

Lenovo Dispatcher Driver Vulnerability - Lenovo Support US

No description provided...

September 9, 2025—KB5065509 (Monthly Rollup)

None None...

September 9, 2025—KB5065508 (Monthly Rollup)

None None...

September 9, 2025—KB5065427 (OS Build 14393.8422)

None None...

September 9, 2025—KB5065430 (OS Build 10240.21128)

None None...

September 9, 2025—KB5065510 (Security-only update)

None None...

KB5065435: Cumulative security update for Internet Explorer: September 9, 2025

None None...

September 9, 2025—KB5065507 (Monthly Rollup)

None None...

thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142

A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs are present in the following versions: Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141, a...

[SECURITY] Fedora 42 Update: python-flask-3.1.2-2.fc42

Flask is called a =E2=80=9Cmicro-framework=E2=80=9D because the idea to keep the core simple but extensible. There is no database abstraction layer, no form validation or anything else where different libraries already exist that can handle that. However Flask knows the concept of extensions that...

Core Spring Resilience Features: @ConcurrencyLimit, @Retryable, and RetryTemplate

This is the first blog post in the Road to GA series, highlighting major features within the Spring portfolio for the next major versions to be released in November of this year. Today we are proud to announce the new resilience features coming in Spring Framework 7.0: concurrency throttling and...

PT-2025-36773

Name of the Vulnerable Software and Affected Versions: Awesome Support versions through 6.3.4 Description: A missing authorization flaw exists in Awesome Support. The issue potentially exposes low-confidentiality data. Recommendations: Update Awesome Support to a version newer than 6.3.4, if...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager is a unified endpoint management solution for multiple operating systems such as Windows, macOS, Linux, Chrome OS and supports IoT devices. A code execution vulnerability exists in Ivanti Endpoint Manager that stems from a lack of adequate validation of filenames of upload...