CVE-2025-51734

A cross-site scripting (XSS) vulnerability exists in HCL Technologies Ltd. Unica version 12.0.0 . This flaw allows for the injection of malicious scripts into web pages viewed by other users, which could potentially lead to unauthorized actions performed on behalf of a user. Remediation requires ...

PT-2025-48338

File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0...

PT-2025-48335

Name of the Vulnerable Software and Affected Versions HCL Technologies Ltd. Unica version 12.0.0 Description The software is susceptible to a Cross-Site Request Forgery CSRF issue. This allows an attacker to potentially perform actions on behalf of an authenticated user without their knowledge...

CVE-2025-51735

HCL Technologies Ltd. Unica version 12.0.0 is vulnerable to a CSV formula injection vulnerability (CWE-1236). This issue allows for potential manipulation through the use of crafted CSV files . While a specific exploit link is referenced in external sources, no direct exploit code or specific pro...

CVE-2025-51733

Cross-Site Request Forgery CSRF vulnerability in HCL Technologies Ltd. Unica 12.0.0...

Mastering Software Governance with Hosted Technologies Inventory

Gain visibility into every technology in your environment and eliminate governance gaps...

PT-2025-41: The Twinkly Light Tree 3D firmware uses a vulnerable Blufi library

The vulnerability was identified in the Twinkly Light Tree 3D firmware, 2.8.18. An attacker within Bluetooth range, with physical access to a device running firmware prior to 2.9.0 and provisioning mode manually re-enabled could, in an attack scenario, interfere with the provisioning exchange and...

CVE-2025-0643

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS. This issue affects Pyxis Signage: through 31012025...

CVE-2025-0645

CVE-2025-0645 concerns Narkom Pyxis Signage (through version 31012025) with an Unrestricted Upload of File with Dangerous Type vulnerability. The issue allows uploading dangerous files that access functionality not properly constrained by ACLs, effectively enabling access beyond intended permissi...

CVE-2025-0643: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS. This issue affects Pyxis Signage: through 31012025...

CVE-2021-4467

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

CVE-2021-4467

CVE-2021-4467 affects Positive Technologies MaxPatrol 8 and XSpider, where the client communication service listening on TCP port 2002 accepts new session IDs per connection without adequately throttling concurrent requests. An unauthenticated attacker could issue repeated HTTPS requests to cause...

CVE-2021-4467 Positive Technologies MaxPatrol 8 & XSpider Remote DoS

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

CVE-2021-4467: Uncontrolled Resource Consumption

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

Future-Proofing Retail Security: Preparing for Tomorrow's Cyberthreats

Learn about the emerging cybersecurity threats facing retailers and the advanced technologies needed to build adaptive, future-ready security defenses...

CVE-2025-65002: Incorrect Authorization

Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters...

EUVD-2025-84341

Files or Directories Accessible to External Parties, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Premierturk Information Technologies Inc. Excavation Management Information System allows Footprinting, Functionality Misuse.This issue affects Excavation...

EUVD-2025-84351

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass.This iss...

CVE-2025-10161 Authentication Bypass in Turkguven's Perfektive

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass. This...

Gartner Recognizes Flowable in 2025 Magic Quadrant for Business Orchestration and Automation Technologies

ZÜRICH, Switzerland - Flowable, a global provider of enterprise automation and orchestration software, has been recognized in the…...