Command Execution Vulnerability in MSG2200 at Resconda Technology Development Co.

Ltd. is an industry-leading provider of optical networking products and system solutions. A command execution vulnerability exists in the MSG2200 of Riseconda Technology Development Corporation, which can be exploited by an attacker to execute arbitrary commands...

Arbitrary File Read Vulnerability in Privileged Account and Operation and Maintenance Audit System of Sanwei Xinan Technology Co.

Privileged Account and Operation and Maintenance Audit System focuses on the full life cycle management and operation behavior monitoring of high-privileged accounts. The product prevents the risk of unauthorized access by centralizing the control of privileged accounts and implementing mechanism...

Rising star: Meet Dylan, MSRC’s youngest security researcher

At just 13 years old, Dylan became the youngest security researcher to collaborate with the Microsoft Security Response Center MSRC. His journey into cybersecurity is inspiring—rooted in curiosity, resilience, and a deep desire to make a difference. Early beginnings: From scratch to security...

Asrmicro ASR Series 安全漏洞

Asrmicro ASR Series is a series of chips from China's Avantage Technology Asrmicro. A security vulnerability exists in Asrmicro ASR Series, which originates from a resource leak in the sms.c file in router...

Asrmicro ASR Series 安全漏洞

Asrmicro ASR Series is a series of chips from Avantage Technology Asrmicro, a Chinese company. A security vulnerability exists in Asrmicro ASR Series, which originates from out-of-bounds access to the LzmaEnc.c file in lte-telephony...

Asrmicro ASR Series 安全漏洞

The Asrmicro ASR Series is a series of chips from Avantage Technology Asrmicro, a Chinese company. A security vulnerability exists in Asrmicro ASR Series, which originates from a resource leak that could lead to resource exposure...

Asrmicro ASR Series 安全漏洞

Asrmicro ASR Series is a series of chips from Avantage Technology Asrmicro, a Chinese company. A security vulnerability exists in Asrmicro ASR Series, which originates from an improper resource release in the tr069uci.c file in the tr069 module, which could lead to a resource leak...

Asrmicro ASR Series 安全漏洞

Asrmicro ASR Series is a series of chips from Avantage Technology Asrmicro, a Chinese company. A security vulnerability exists in Asrmicro ASR Series, which originates from an out-of-bounds write to the devapi.C file in lte-telephony that could result in a buffer underflow...

U.S. Agencies Warn of Rising Iranian Cyber Attacks on Defense, OT Networks, and Critical Infrastructure

U.S. cybersecurity and intelligence agencies have issued a joint advisory warning of potential cyber attacks from Iranian state-sponsored or affiliated threat actors. "Over the past several months, there has been increasing activity from hacktivists and Iranian government-affiliated actors, which...

CISA and Partners Urge Critical Infrastructure to Stay Vigilant in the Current Geopolitical Environment

Today, CISA, in collaboration with the Federal Bureau of Investigation FBI, the Department of Defense Cyber Crime Center DC3, and the National Security Agency NSA, released a Fact Sheet urging organizations to remain vigilant against potential targeted cyber operations by Iranian state-sponsored ...

Logic Flaw Vulnerability in Operation and Maintenance Management Audit System of Shanghai Shangxun Information Technology Co.

Founded in December 2010, Shanghai SinoCom-ArtM Information Technology Co., Ltd hereinafter referred to as "SinoCom-ArtM" is one of the leading providers of IT intelligent security operation and maintenance, data governance, security services and other fields in China. A logic flaw exists in the...

Binary Vulnerability in Unisys UOS Browser at Unisys Software Technology Limited (CNVD-2025-18468)

Unisys Software Technology Co., Ltd. is a company specializing in the development and service of operating systems. A binary vulnerability exists in the Unisys UOS Browser, which can be exploited by attackers to cause a denial of service...

Binary Vulnerability in Unisys UOS Browser at Unisys Software Technology Limited (CNVD-2025-18469)

Unisys Software Technology Co., Ltd. is a company specializing in the development and service of operating systems. A binary vulnerability exists in the Unisys UOS Browser, which can be exploited by attackers to cause a denial of service...

Over 1,000 SOHO Devices Hacked in China-linked LapDogs Cyber Espionage Campaign

Threat hunters have discovered a network of more than 1,000 compromised small office and home office SOHO devices that have been used to facilitate a prolonged cyber espionage infrastructure campaign for China-nexus hacking groups. The Operational Relay Box ORB network has been codenamed LapDogs ...

OneClik Red Team Campaign Targets Energy Sector Using Microsoft ClickOnce and Golang Backdoors

Cybersecurity researchers have detailed a new campaign dubbed OneClik that leverages Microsoft's ClickOnce software deployment technology and bespoke Golang backdoors to compromise organizations within the energy, oil, and gas sectors. "The campaign exhibits characteristics aligned with...

Iranian APT35 Hackers Targeting Israeli Tech Experts with AI-Powered Phishing Attacks

An Iranian state-sponsored hacking group associated with the Islamic Revolutionary Guard Corps IRGC has been linked to a spear-phishing campaign targeting journalists, high-profile cyber security experts, and computer science professors in Israel. "In some of those campaigns, Israeli technology a...

TEMPEST-LoRa: Cross-Technology Covert Communication

Electromagnetic EM covert channels pose significant threats to computer and communications security in air-gapped networks. Previous works exploit EM radiation from various components e.g., video cables, memory buses, CPUs to secretly send sensitive information. These approaches typically require...

CVE-2025-6618

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19491 2025-06-30 20:26:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Storage Protect Server

Summary Multiple vulnerabilities exist in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Storage Protect Server. CVE-2024-21235, CVE-2024-21217, CVE-2024-21210, CVE-2024-21208, CVE-2024-10917. Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE...

Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Storage Server (CVE-2025-1470, CVE-2025-1471).

Summary IBM Storage Protect Server is affected by multiple vulnerabilities in the IBM® SDK Java™ Technology Edition, Version 8. These vulnerabilities could potentially affect OpenJ9 internal ASCII to EBCDIC string wrapper on z/OS. Vulnerability Details CVEID:CVE-2025-1470 DESCRIPTION: In Eclipse...