Aggregator

Ubiquiti UniFi Door Access App Vulnerability Exposes API Management Without Authentication

Cyber Security News
5 days 1 hour ago

Ubiquiti’s UniFi Access application has been found vulnerable to a critical flaw that leaves its management API exposed without authentication. Discovered by Catchify Security, this issue allows malicious actors on the management network to potentially take full control of door access systems, raising alarms for organizations relying on the platform for physical security. The vulnerability […]

The post Ubiquiti UniFi Door Access App Vulnerability Exposes API Management Without Authentication appeared first on Cyber Security News.

Guru Baran

X Warns Users With Security Keys to Re-Enroll Before November 10 to Avoid Lockouts

The Hackers News
5 days 1 hour ago
Social media platform X is urging users who have enrolled for two-factor authentication (2FA) using passkeys and hardware security keys like Yubikeys to re-enroll their key to ensure continued access to the service. To that end, users are being asked to complete the re-enrollment, either using their existing security key or enrolling a new one, by November 10, 2025. "After November 10, if you
The Hacker News

CVE-2025-12343 | FFmpeg TensorFlow DNN Backend dnn_execute_model_tf double free (WID-SEC-2025-2423)

VulDB Recent Entries
5 days 2 hours ago
A vulnerability was found in FFmpeg. It has been declared as critical. Affected by this vulnerability is the function dnn_execute_model_tf of the component TensorFlow DNN Backend. Executing manipulation can lead to double free. The identification of this vulnerability is CVE-2025-12343. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-10023 | Centreon Infra Monitoring up to 23.10.25/24.04.15/24.10.8 Services Meta-Services cross site scripting (EUVD-2025-36202)

VulDB Recent Entries
5 days 2 hours ago
A vulnerability has been found in Centreon Infra Monitoring up to 23.10.25/24.04.15/24.10.8 and classified as problematic. This affects an unknown function of the component Services Meta-Services Module. This manipulation causes cross site scripting. This vulnerability is handled as CVE-2025-10023. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.
vuldb.com

CVE-2025-34133 | Cloud Solutions SAS Wimi Teamwork up to 7.38.16 csrf_token cross-site request forgery (EUVD-2025-36201)

VulDB Recent Entries
5 days 2 hours ago
A vulnerability, which was classified as problematic, was found in Cloud Solutions SAS Wimi Teamwork up to 7.38.16. The impacted element is an unknown function. The manipulation of the argument csrf_token results in cross-site request forgery. This vulnerability is known as CVE-2025-34133. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2025-52268 | StarCharge Artemis AC Charger 7-22 kW 1.0.4 AES Key hard-coded key

VulDB Recent Entries
5 days 2 hours ago
A vulnerability, which was classified as problematic, has been found in StarCharge Artemis AC Charger 7-22 kW 1.0.4. The affected element is an unknown function of the component AES Key Handler. The manipulation leads to use of hard-coded cryptographic key . This vulnerability is traded as CVE-2025-52268. Access to the local network is required for this attack to succeed. There is no exploit available.
vuldb.com

CVE-2025-52263 | StarCharge Artemis AC Charger 7-22 kW 1.0.4 Web Configuration privilege escalation

Vuldb Updates
5 days 2 hours ago
A vulnerability was found in StarCharge Artemis AC Charger 7-22 kW 1.0.4. It has been declared as critical. This affects an unknown function of the component Web Configuration Module. Such manipulation leads to privilege escalation. This vulnerability is referenced as CVE-2025-52263. The attack needs to be initiated within the local network. No exploit is available.
vuldb.com

Introducing audit logs in SonarQube Cloud: Enhancing compliance and security

Security Boulevard
5 days 2 hours ago

Introducing the initial release of audit logs for SonarQube Cloud, a new feature designed to provide enhanced governance and support for our Enterprise plan customers. This initial, API-driven release focuses on core authentication and administrative IAM events to help you meet compliance requirements.

The post Introducing audit logs in SonarQube Cloud: Enhancing compliance and security appeared first on Security Boulevard.

Andrew Osborne

Managed ad