EUVD-2025-38176

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

EUVD-2025-38179

SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the processing of the ‘module’ parameter within the ‘deleteAttachment’ functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of t...

New IDC research highlights a major cloud security shift

Cloud security is at a tipping point. While moving to the cloud powers both growth and speed for organizations, it can also bring new risks. According to IDC’s latest research, organizations experienced an average of nine cloud security incidents in 2024, with 89% reporting a year-over-year...

New IDC research highlights a major cloud security shift

Cloud security is at a tipping point. While moving to the cloud powers both growth and speed for organizations, it can also bring new risks. According to IDC’s latest research, organizations experienced an average of nine cloud security incidents in 2024, with 89% reporting a year-over-year...

Top 7 Companies Specializing in Product Discovery Phase in 2025

Finding the right partner is less about headcount and more about repeatable outcomes, which is why the profiles…...

Bitdefender Named a Representative Vendor in the 2025 Gartner® Market Guide for Managed Detection and Response

Bitdefender has once again been recognized as a Representative Vendor in the Gartner® Market Guide for Managed Detection and Response MDR — marking the fourth consecutive year of inclusion. According to Gartner, more than 600 providers globally claim to deliver MDR services, yet only a select few...

EUVD-2025-37970

Not used...

EUVD-2025-37968

Not used...

CVE-2025-62161

creationtimestamp| type| source ---|---|--- 2025-11-06 01:35:42+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4wgealc2zj2 2025-11-06 03:46:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4wnpd2aiu2b...

EUVD-2025-37946

Malicious code in rbx-reader-ts npm...

CVE-2025-46364

creationtimestamp| type| source ---|---|--- 2025-11-05 17:51:37+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4vmf7dgqpb2 2025-11-05 17:57:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4vmrhbc6h2u 2025-11-05 18:28:14+00:00| seen|...

CVE-2025-7962

creationtimestamp| type| source ---|---|--- 2025-11-05 16:45:05+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3m4viptibot2d 2025-11-06 18:35:04+00:00| seen| https://bsky.app/profile/knaepp.bsky.social/post/3m4y7dgxi7t2r 2025-11-10 17:35:03+00:00| seen|...

EUVD-2025-37765

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, django.http.HttpResponseRedirect, django.http.HttpResponsePermanentRedirect, and the shortcut django.shortcuts.redirect were subject to a...

EUVD-2025-37768

A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability...

EUVD-2025-37778

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.6.4.1. This is due to the plugin not properly verifying that a user is authorized to perform administrativ...

EUVD-2025-37779

The Events Calendar plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 6.15.9. The sysinfo REST endpoint compares the provided key to the stored opt-in key using a loose comparison, allowing unauthenticated attackers to send a boolean value and obtain t...

CVE-2025-11072

creationtimestamp| type| source ---|---|--- 2025-11-05 07:41:38+00:00| seen| https://gist.github.com/Darkcrai86/c4d44670b29a5ed180178c01985cf62d...

EUVD-2025-37786

A flaw was found in Red Hat Satellite Foreman component. This vulnerability allows an authenticated user with editsettings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of command whitelisting...

EUVD-2025-37787

The KiotViet Sync plugin for WordPress is vulnerable to authorizarion bypass in all versions up to, and including, 1.8.5. This is due to the plugin using a hardcoded password for authentication in the QueryControllerAdmin::authenticated function. This makes it possible for unauthenticated attacke...

EUVD-2025-37790

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "getlocalizedata" function. This makes it possible for unauthenticated attackers to extract sensitive...