CVE-2018-21059

An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is Clipboard content visibility in the locked state via the emergency contact picker. The Samsung ID is SVE-2018-11806 September 2018...

CVE-2019-6794

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure issue 5 of 6. A project guest user can view the last commit status of the default branch...

CVE-2019-15580

An information exposure vulnerability exists in gitlab.com...

Citrix PVS Console and Server Not Visible to Other Admins After Installed via CLI

After installing the Citrix Provisioning Services PVS Console and server version 2402 CU2 on a Windows Server 2019 machine using command line, the application is only visible to the user who performed the installation. Other administrators logging into the same server do not see the Citrix PVS...

Improper Neutralization of Escape, Meta, or Control Sequences

Overview Affected versions of this package are vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences via the Hubble CLI terminal output processing. An attacker can manipulate the output to conceal log entries, rewrite output, or make the terminal temporarily unusable by...

CVE-2025-48056 Hubble CLI vulnerable to character injection

Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to version 1.17.2, a network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output...

CVE-2025-47850

CVE-2025-47850 affects JetBrains YouTrack prior to 2025.1.74704, where restricted attachments could become visible after cloning an issue. The linked PT-security note specifies versions prior to 2025.1.74704 as affected and recommends upgrading to 2025.1.74704 or newer to resolve the issue. The N...

Why CTEM is the Winning Bet for CISOs in 2025

Continuous Threat Exposure Management CTEM has moved from concept to cornerstone, solidifying its role as a strategic enabler for CISOs. No longer a theoretical framework, CTEM now anchors today's cybersecurity programs by continuously aligning security efforts with real-world risk. At the heart ...

CLSA-2025-1747431041 Fix CVE(s): CVE-2024-10976, CVE-2024-10977

SECURITY UPDATE: incomplete tracking of row security allows unauthorized access to data - debian/patches/CVE-2024-10976.patch: Ensure cached plans to be correctly marked as dependent on role to fix the issue of neglected marking which could lead to incorrect row visibility. - CVE-2024-10976...

Forensics of Error Rates of Quantum Hardware

There has been a rise in third-party cloud providers offering quantum hardware as a service to improve performance at lower cost. Although these providers provide flexibility to the users to choose from several qubit technologies, quantum hardware, and coupling maps; the actual execution of the...

Master image not visible while creating or updating MCS catalog

While creating a new catalog or updating an existing catalog, new Master image created on the vSphere hosting is not visible...

CVE-2025-31218

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5. An app may be able to observe the hostnames of new network connections...

CVE-2025-31218

CVE-2025-31218 affects macOS Sequoia 15.5 and earlier where an app could observe hostnames of new network connections via the NetworkExtension path. The issue was addressed by removing the vulnerable code and is fixed in macOS Sequoia 15.5. Reported impact: local attacker may observe hostnames; C...

The Persistence Problem: Why Exposed Credentials Remain Unfixed—and How to Change That

Detecting leaked credentials is only half the battle. The real challenge—and often the neglected half of the equation—is what happens after detection. New research from GitGuardian's State of Secrets Sprawl 2025 report reveals a disturbing trend: the vast majority of exposed company secrets...

CVE-2025-4509

creationtimestamp| type| source ---|---|--- 2025-05-10 18:29:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15906 2025-05-10 20:30:23+00:00| published-proof-of-concept| Telegram/JOEmVrZPDW65BYYHlzxrjRSRQg3iXfNsb1k2QQNTi1kNxIw 2025-05-10 20:37:37+00:00| seen|...

Gain Deeper Visibility into Risks to Meet Security Compliance Demands

...

CVE-2025-46336

creationtimestamp| type| source ---|---|--- 2025-05-08 19:48:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojp564pw2 2025-05-08 20:23:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15607 2025-05-08...

CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

Reevaluating SSEs: A Technical Gap Analysis of Last-Mile Protection

Security Service Edge SSE platforms have become the go-to architecture for securing hybrid work and SaaS access. They promise centralized enforcement, simplified connectivity, and consistent policy control across users and devices. But there's a problem: they stop short of where the most sensitiv...