CVE-2024-56339

creationtimestamp| type| source ---|---|--- 2025-07-17 13:20:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3lu5zj3fenn2b 2025-07-17 13:30:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3lu622welul2m 2025-07-17 14:10:03+00:00| seen|...

CVE-2025-53840 Icinga DB Web Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Icinga DB Web provides a graphical interface for Icinga monitoring. Starting in version 1.2.0 and prior to version 1.2.2, users with access to Icinga Dependency Views, are allowed to see hosts and services that they weren't meant to on the dependency map. However, the name of an object will not b...

CISA's NIMBUS 2000 Initiative: Understanding Key Findings and Strengthening Cloud Identity Security

This blog explores key findings from CISA’s NIMBUS 2000 Cloud Identity Security Technical Exchange and how Trend Vision One™ Cloud Security aligns with these priorities. It highlights critical challenges in token validation, secrets management, and logging visibility—offering insights into how...

CVE-2025-6390

Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These audit logs are the local server VM’s audit logs and are not controlled by SANnav. These logs are only visible to the server admin of the...

​​Forrester names Microsoft a Leader in the 2025 Zero Trust Platforms Wave™ report

We are proud to share that Forrester has named Microsoft a Leader in The Forrester Wave™: Zero Trust Platforms, Q3 2025 report, ranking us highest in the strategy category. With so many strong vendors and solutions in the Zero Trust space, you need solid data to make the right choice for your...

BIT-APPSMITH-2024-55965

An issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have access to development information of a workspace specifically, a list of datasources in a workspace they're a member of. This information disclosure does not expose sensitive data in the datasources,...

BIT-DISCOURSE-2025-49845 Discourse users are able to see their own whispers even after being removed from a group that has been configured to see whispers

Discourse is an open-source discussion platform. The visibility of posts typed whisper is controlled via the whispersallowedgroups site setting. Only users that belong to groups specified in the site setting are allowed to view posts typed whisper. However, it has been discovered that users of...

GHSA-W8P2-WJJR-HR24

creationtimestamp| type| source ---|---|--- 2025-06-30 19:10:24+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/114773893007684210 2025-06-30 19:28:14+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/18657...

CVE-2025-32463

creationtimestamp| type| source ---|---|--- 2025-06-30 14:19:50+00:00| seen| https://seclists.org/oss-sec/2025/q2/288 2025-06-30 16:28:09+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lstm3pbudj2g 2025-06-30 16:47:26+00:00| seen|...

CVE-2025-53094

creationtimestamp| type| source ---|---|--- 2025-06-27 20:25:01+00:00| seen| https://bsky.app/profile/potato.software/post/3lsmhwirigj2p 2025-06-27 20:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmiqcpzd325 2025-06-27 20:52:27+00:00| published-proof-of-concept|...

CVE-2025-49845

Discourse is an open-source discussion platform. The visibility of posts typed whisper is controlled via the whispersallowedgroups site setting. Only users that belong to groups specified in the site setting are allowed to view posts typed whisper. However, it has been discovered that users of...

Discourse < 3.4.6 Information Disclosure Vulnerability

Discourse is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-49845 Discourse users are able to see their own whispers even after being removed from a group that has been configured to see whispers

Discourse is an open-source discussion platform. The visibility of posts typed whisper is controlled via the whispersallowedgroups site setting. Only users that belong to groups specified in the site setting are allowed to view posts typed whisper. However, it has been discovered that users of...

CVE-2025-49845 Discourse users are able to see their own whispers even after being removed from a group that has been configured to see whispers

Discourse is an open-source discussion platform. The visibility of posts typed whisper is controlled via the whispersallowedgroups site setting. Only users that belong to groups specified in the site setting are allowed to view posts typed whisper. However, it has been discovered that users of...

CVE-2025-49845

Discourse has a vulnerability (CVE-2025-49845) where users on versions prior to 3.4.6 (stable) or 3.5.0.beta8-dev (tests-passed) can still view their own whispers after losing visibility to posts typed whisper. The issue is fixed in 3.4.6 and 3.5.0.beta8-dev. No publicly provided workarounds are ...

CVE-2025-49845 Discourse users are able to see their own whispers even after being removed from a group that has been configured to see whispers

Discourse is an open-source discussion platform. The visibility of posts typed whisper is controlled via the whispersallowedgroups site setting. Only users that belong to groups specified in the site setting are allowed to view posts typed whisper. However, it has been discovered that users of...

PT-2025-26841 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 3.4.6 Discourse versions prior to 3.5.0.beta8-dev Description: Discourse is an open-source discussion platform where the visibility of posts typed whisper is controlled via the whispers allowed groups site setting...

Building Resilient Software Supply Chains: Inside the Enhanced Qualys Software Composition Analysis

In today’s software-driven economy, every organization, regardless of industry, is a software company. And increasingly, every software company is an open-source company. With open-source components OSS now comprising up to 80% of modern codebase, the software supply chain has emerged as one of t...

CVE-2025-30675

In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the 'domainid' parameter along with the 'filter=self' or 'filter=selfexecutable' values. This allows the attack...

CVE-2016-1000027

creationtimestamp| type| source ---|---|--- 2025-06-12 03:25:59+00:00| seen| https://bsky.app/profile/msw.bsky.social/post/3lrexyicuzs2f 2025-06-12 03:30:28+00:00| seen| https://bsky.app/profile/msw.bsky.social/post/3lreyahne4c2f 2026-01-07 03:00:06+00:00| published-proof-of-concept|...