CVE-2025-50572

The RSA Archer risk management software platform (version 6.11.00204.10014 ) is vulnerable to arbitrary code execution due to the improper neutralization of formula elements in exported CSV files. Attackers can provide crafted system inputs that are included in the CSV; when a user opens this fil...

CVE-2025-50572

Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file with compatible applications. NOTE: the Supplier does not accept this as a valid vulnerability report against their produ...

CVE-2025-50572

Archer 6.11.00204.10014 allows attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file with compatible applications. NOTE: the Supplier does not accept this as a valid vulnerability report against their produ...

FunkSec Ransomware Decryptor Released Free to Public After Group Goes Dormant

Cybersecurity experts have released a decryptor for a ransomware strain called FunkSec, allowing victims to recover access to their files for free. "Because the ransomware is now considered dead, we released the decryptor for public download," Gen Digital researcher Ladislav Zezula said. FunkSec,...

Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools

Chinese companies linked to the state-sponsored hacking group known as Silk Typhoon aka Hafnium have been identified as behind over a dozen technology patents, shedding light on the shadowy cyber contracting ecosystem and its offensive capabilities. The patents cover forensics and intrusion tools...

Security Bulletin: Due to the use of IBM SDK, Java Technology, IBM Watson Explorer is vulnerable to a remote attacker to cause high confidentiality and high integrity impact

Summary IBM SDK, Java Technology is used within IBM Watson Explorer CVE-2025-21587 Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in Java SE related to the Server: DDL component could allow a remote attacker to cause high confidentiality and high integrity...

PT-2025-31153 · Unknown +1 · Revelacode +1

Name of the Vulnerable Software and Affected Versions: RevelaCode versions prior to 1.0.1 Description: RevelaCode is an AI-powered faith-tech project that decodes biblical verses, prophecies and global events into accessible language. A valid MongoDB Atlas URI with embedded username and password...

Simopro Technology WinMatrix3 Deserialization Vulnerability

Simopro Technology WinMatrix3 is an IT resource management system for enterprise-class computer asset management, endpoint security control and IT operations management. Simopro Technology WinMatrix3 suffers from a deserialization vulnerability that arises from unsafe deserialization of serialize...

BRB, pausing for a "Sanctuary Moon" marathon

Welcome to this week's edition of the Threat Source newsletter. Yesterday, Cisco Talos debuted the first Humans of Talos episode, where I interviewed Hazel Burton, a face and voice you're probably familiar with. In our conversation, Hazel shared not just the story of how she found her way onto th...

CVE-2025-8019

A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub40B6F0 of the file at/appy.cgi. The manipulation of the argument wanproto leads to buffer overflow. The attack may be launched remotely. The...

Proactive Email Security: The Power of AI

Lead with AI-powered email security to stay ahead of attackers and personalize user interaction at every touchpoint, bridging technology and behavior with precision...

CVE-2025-7920

WinMatrix3 Web package developed by Simopro Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

CVE-2025-7919

WinMatrix3 Web package developed by Simopro Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2025-7916

WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized contents...

CVE-2025-8019 Shenzhen Libituo Technology LBT-T300-T310 appy.cgi sub_40B6F0 buffer overflow

A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub40B6F0 of the file at/appy.cgi. The manipulation of the argument wanproto leads to buffer overflow. The attack may be launched remotely. The...

[SECURITY] Fedora 42 Update: cef-138.0.25^chromium138.0.7204.157-1.fc42

CEF is an embeddable build of Chromium, powered by WebKit Blink...

PT-2025-30436 · Shenzhen Libituo Technology Co. · Lbt-T300-T310

Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology LBT-T300-T310 version 2.2.3.6 Description: A critical remote buffer overflow vulnerability exists in the sub 40B6F0 function of the /appy.cgi file. The vulnerability is triggered by manipulating the wan proto...

Shenzhen Libituo Technology LBT-T300-T310 安全漏洞

Shenzhen Libituo Technology LBT-T300-T310 is an industrial router from Shenzhen Libituo Technology China. A security vulnerability exists in the Shenzhen Libituo Technology LBT-T300-T310 version 2.2.3.6, which is caused by a buffer overflow due to a misbehavior of the function sub40B6F0 in the fi...

CVE-2025-8019: Buffer Copy without Checking Size of Input

A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub40B6F0 of the file at/appy.cgi. The manipulation of the argument wanproto leads to buffer overflow. The attack may be launched remotely. The...

CVE-2025-7920

WinMatrix3 Web package developed by Simopro Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...