Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 139, which stems from an omission of the CSP header when previewing responses in Devtools, which could lead to a content injection...

The vulnerability of the IBM Security Directory Integrator, a software tool for synchronizing identity data, and the IBM Security Verify Directory Integrator, an integration tool, lies in their ability to disclose protected information by reading directory files.

The vulnerability of the IBM Security Directory Integrator and IBM Security Verify Directory Integrator software lies in their ability to disclose information by reading directory files. Exploiting this vulnerability allows a malicious actor to disclose protected information...

XenServer and Citrix Hypervisor Security Update for CVE-2025-27462, CVE-2025-27463, CVE-2025-27464

Description of Problem Issues have been identified in the XenServer VM Tools for Windows that allow an attacker who has the ability to execute arbitrary unprivileged code within a guest Windows VM to compromise that same VM. This issue affects Windows VMs running on either XenServer 8.4 and Citri...

OPENSUSE-SU-2025:15173-1 s390-tools-2.37.0-4.1 on GA media

These are all security issues fixed in the s390-tools-2.37.0-4.1 package on the GA media of openSUSE Tumbleweed...

SilverRAT Source Code Leaked Online: Here’s What You Need to Know

SilverRAT Source Code leaked on GitHub, exposing powerful malware tools for remote access, password theft, and crypto attacks before removal...

ROS-20250526-08

Vulnerability in the soupheaderparsequalitylist function of the libsoup GUI library GNOME of Linux operating systems is related to a memory leak when parsing a quality list containing elements with all zeros. Exploitation of the vulnerability could allow an attacker acting remotely, gain access t...

Fedora: Security Advisory (FEDORA-2025-a6305306dd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-23653a72d9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-a3561bfc13)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-47458

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in B2itech B2i Investor Tools b2i-investor-tools allows Reflected XSS.This issue affects B2i Investor Tools: from n/a through = 1.0.7.9...

CVE-2025-5147

CVE-2025-5147 affects Netcore NBR1005GPEV2, NBR200V2, and B6V2 (up to 20250508). The vulnerability resides in the function tools_ping in the file /usr/bin/network_tools, where improper handling of the url argument allows command injection. Exploitation can be remote, and public disclosure exists....

[SECURITY] Fedora 41 Update: open-vm-tools-12.5.2-1.fc41

The open-vm-tools project is an open source implementation of VMware Tools. It is a suite of open source virtualization utilities and drivers to improve the functionality, user experience and administration of VMware virtual machines. This package contains only the core user-space programs and...

Netcore多款产品 注入漏洞

Netcore NBR1005GPEV2 and others are products of China Lei Ke Netcore.Netcore NBR1005GPEV2 is a full gigabit multi-WAN port POE-powered enterprise AP management multifunction wired router.Netcore B6V2 is a full gigabit wireless router.Netcore COVER5 is an enterprise-class router. An injection...

Fedora 41 : open-vm-tools (2025-a6305306dd)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a6305306dd advisory. Update to version 12.5.2. Fixes CVE-2025-22247 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

PT-2025-22858 · Netcore · Netcore B6V2 +2

Name of the Vulnerable Software and Affected Versions: Netcore NBR1005GPEV2 versions up to 20250508 Netcore NBR200V2 versions up to 20250508 Netcore B6V2 versions up to 20250508 Description: A critical issue affects the tools ping function of the file /usr/bin/network tools. The manipulation of t...

SUSE CVE-2025-46836

net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities like ifconfig from the net-tools package do not properly validate the structure of /proc files when...

ConnectWise ScreenConnect Tops List of Abused RATs in 2025 Attacks

Cofense Intelligence's May 2025 report exposes how cybercriminals are abusing legitimate Remote Access Tools RATs like ConnectWise and Splashtop to deliver malware and steal data. Learn about this growing threat...

CVE-2025-48414

There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts provide access to additional administrative/debug functionality and are likely intended for debugging during development and provides an additional attack surface...

CVE-2025-47458

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in B2itech B2i Investor Tools b2i-investor-tools allows Reflected XSS.This issue affects B2i Investor Tools: from n/a through = 1.0.7.9...

CVE-2025-47458 WordPress B2i Investor Tools plugin <= 1.0.7.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in B2itech B2i Investor Tools allows Reflected XSS. This issue affects B2i Investor Tools: from n/a through 1.0.7.9...