CVE-2025-36578

CVE-2025-36578 refers to Dell Wyse Management Suite (WMS) versions prior to 5.2, with an Incorrect Authorization vulnerability. A low-privileged attacker with remote access could potentially achieve Unauthorized access. Affected product/version: Dell Wyse Management Suite before 5.2. Root cause d...

MicroDicom DICOM Viewer

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...

Out-of-Bounds read vulnerability in TCG TPM2.0 reference implementation

Overview An out-of-bounds OOB read vulnerability has been identified in the Trusted Platform Module TPM 2.0 reference library specification, currently at Level 00, Revision 01.83 March 2024. An attacker with access to a TPM command interface can exploit this vulnerability by sending specially...

The vulnerability of the nf_tables_dump_setelem() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nftablesdumpsetelem function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to insufficient resource management during its existence. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2024-58114

Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability...

PT-2025-24311 · Huawei · Huawei Eg8145V5 +2

Name of the Vulnerable Software and Affected Versions: Huawei EG8141A5 versions through V5R019C00S100 Huawei EG8145V5 versions through V5R019C00S100 Huawei EG8145V5-V2 versions through V5R021C00S184 Description: The issue allows the Epuser account to disable ONT firewall functionality. This can b...

PT-2025-23948

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is being actively exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2025-48941

MyBB is free and open source forum software. Prior to version 1.8.39, the search component does not validate permissions correctly, which allows attackers to determine the existence of hidden draft, unapproved, or soft-deleted threads containing specified text in the title. The visibility state...

Mitsubishi Electric MELSEC iQ-F Series

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read confidential information, cause a denial-of-service condition, or stop operations by sending specially crafted packets. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact...

CVE-2024-1440 Open Redirection in Multiple WSO2 Products via Multi-Option Authentication Endpoint

An open redirection vulnerability exists in multiple WSO2 products due to improper validation of the multi-option URL in the authentication endpoint when multi-option authentication is enabled. A malicious actor can craft a valid link that redirects users to an attacker-controlled site. By...

CVE-2024-1440

CVE-2024-1440 describes an open redirection in multiple WSO2 products caused by improper validation of the multi-option URL in the authentication endpoint when multi-option authentication is enabled. A crafted link can redirect users to attacker-controlled sites, enabling phishing or similar soci...

Binary Vulnerability in AC6V2.0 of Shenzhen Jixiang Tengda Technology Co.

The AC6V2.0 is a wireless router model that is primarily used to provide network connectivity. Ltd. AC6V2.0 suffers from a binary vulnerability that can be exploited by an attacker to cause a stack overflow...

Hewlett Packard Enterprise StoreOnce VSA Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise StoreOnce VSA. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the machineAccountCheck method. The issue...

Exploits and vulnerabilities in Q1 2025

The first quarter of 2025 saw the continued publication of vulnerabilities discovered and fixed in 2024, as some researchers were previously unable to disclose the details. This partially shifted the focus away from vulnerabilities that received new CVE-2025-NNNNN identifiers. The nature of the C...

CVE-2025-48481 FreeScout Has Business Logic Errors

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, an attacker with an unactivated email invitation containing invitehash, can exploit this vulnerability to self-activate their account, despite it being blocked or deleted, by leveraging the invitation link fro...

Google Pixel Information Leakage Vulnerability

Google Pixel is a smartphone from the American company Google Google. Google Pixel has an information disclosure vulnerability that can be exploited by an attacker to cause out-of-bounds reads...

PT-2025-23161

Name of the Vulnerable Software and Affected Versions gradio-app gradio versions up to 5.29.1 Description A problematic vulnerability has been found in the CORS Handler component, specifically affecting the is valid origin function. The issue arises from the manipulation of the localhost aliases...

Ivanti Neurons for ITSM Authentication Bypass Vulnerability

Ivanti Neurons for ITSM is an automation platform for IT service management, based on artificial intelligence and machine learning technologies, designed to optimize the IT service delivery process and enhance user experience. An authentication bypass vulnerability exists in Ivanti Neurons for...

CVE-2025-48929

The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential e.g., not a token with a short expiration time that can be reused at a later date if discovered by an adversary...

The Windows Registry Adventure #8: Practical exploitation of hive memory corruption

Posted by Mateusz Jurczyk, Google Project Zero In the previous blog post, we focused on the general security analysis of the registry and how to effectively approach finding vulnerabilities in it. Here, we will direct our attention to the exploitation of hive-based memory corruption bugs, i.e.,...