21184 matches found
PT-2025-33625 · Unknown · Developer Tools
Name of the Vulnerable Software and Affected Versions: Developer Tools affected versions not specified Description: A missing input verification flaw exists in Developer Tools. This issue could allow for local escalation of privilege without requiring additional execution privileges...
Linux Distros Unpatched Vulnerability : CVE-2023-34058
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges...
Reducing False Positives with Active Behavioral Analysis for Cloud Security
Rule-based cloud security posture management CSPM solutions are known to produce a lot of false positives based on the limited contextual understanding and dependence on static heuristics testing. This paper introduces a validation-driven methodology that integrates active behavioral testing in...
CVE-2025-53219
Cross-Site Request Forgery CSRF vulnerability in pl4g4 WP-Database-Optimizer-Tools wp-database-optimizer-tools allows Cross Site Request Forgery.This issue affects WP-Database-Optimizer-Tools: from n/a through = 0.2...
CVE-2025-50029
Missing Authorization vulnerability in Ashish AI Tools artificial-intelligence-auto-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Tools: from n/a through = 4.0.7...
Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools
A Chinese-speaking advanced persistent threat APT actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-sourced tools with an aim to establish long-term access within high-value victim environments. The activity has been attributed by Cisco Talo...
OESA-2025-2050 libtiff security update
This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...
OESA-2025-2049 libtiff security update
This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...
Linux Distros Unpatched Vulnerability : CVE-2025-6557
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific...
CVE-2025-53219
Cross-Site Request Forgery CSRF vulnerability in pl4g4 WP-Database-Optimizer-Tools wp-database-optimizer-tools allows Cross Site Request Forgery.This issue affects WP-Database-Optimizer-Tools: from n/a through = 0.2...
Malicious code in @epc-tools/jest (npm)
The package @epc-tools/jest was found to contain malicious code...
Malicious code in vrp-tools (npm)
The package vrp-tools was found to contain malicious code...
Malicious code in micro-tools (npm)
The package micro-tools was found to contain malicious code...
Malicious code in expressful-tools (npm)
The package expressful-tools was found to contain malicious code...
Malicious code in @epc-tools/testutil-cdk-expect-policy (npm)
The package @epc-tools/testutil-cdk-expect-policy was found to contain malicious code...
Malicious code in jetpack-js-tools (npm)
The package jetpack-js-tools was found to contain malicious code...
Malicious code in jsii-build-tools (npm)
The package jsii-build-tools was found to contain malicious code...
Malicious code in cdk-integ-tools (npm)
The package cdk-integ-tools was found to contain malicious code...