Aggregator

Apos

Dark Feed IO
3 months 1 week ago

You must login to view this content

cohenido

Windows Remote Desktop Services Vulnerability Allows Remote Code Execution

Cyber Security News
3 months 1 week ago

A critical security vulnerability in Windows Remote Desktop Services, designated as CVE-2025-32710, which allows unauthorized attackers to execute arbitrary code remotely without authentication.  Released on June 10, 2025, this vulnerability affects multiple Windows Server versions and carries a CVSS score of 8.1, indicating high severity with potential for significant system compromise.  The flaw stems from […]

The post Windows Remote Desktop Services Vulnerability Allows Remote Code Execution appeared first on Cyber Security News.

Guru Baran

CVE-2025-41662 | Weidmueller IE-SR-2TX-WL Main Web Interface tls_iotgen_setting cross-site request forgery (VDE-2025-052 / EUVD-2025-18090)

VulDB Recent Entries
3 months 1 week ago
A vulnerability, which was classified as problematic, has been found in Weidmueller IE-SR-2TX-WL, IE-SR-2TX-WL-4G-EU and IE-SR-2TX-WL-4G-US-V. This issue affects the function tls_iotgen_setting of the component Main Web Interface. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2025-41662. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-41661 | Weidmueller IE-SR-2TX-WL Main Web Interface event_mail_test cross-site request forgery (VDE-2025-052 / EUVD-2025-18089)

VulDB Recent Entries
3 months 1 week ago
A vulnerability classified as problematic was found in Weidmueller IE-SR-2TX-WL, IE-SR-2TX-WL-4G-EU and IE-SR-2TX-WL-4G-US-V. This vulnerability affects the function event_mail_test of the component Main Web Interface. The manipulation leads to cross-site request forgery. This vulnerability was named CVE-2025-41661. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-41663 | Weidmueller IE-SR-2TX-WL os command injection (VDE-2025-052 / EUVD-2025-18088)

VulDB Recent Entries
3 months 1 week ago
A vulnerability classified as critical has been found in Weidmueller IE-SR-2TX-WL, IE-SR-2TX-WL-4G-EU and IE-SR-2TX-WL-4G-US-V. This affects an unknown part. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2025-41663. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Apos

Dark Feed IO
3 months 1 week ago

You must login to view this content

cohenido

CVE-2025-29756 | SunGrow iSolarCloud MQTT Service authorization (EUVD-2025-18091)

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in SunGrow iSolarCloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component MQTT Service. The manipulation leads to missing authorization. This vulnerability is handled as CVE-2025-29756. The attack may be launched remotely. There is no exploit available. This product is a managed service. It is not possible for users to maintain vulnerability countermeasures themselves.
vuldb.com

Microsoft Teams New Update Enhances Productivity & Customization

Cyber Security News
3 months 1 week ago

Microsoft has announced a significant productivity enhancement coming to Microsoft 365 that will allow users to open core collaboration applications in separate windows, marking a major step forward in workspace customization and multitasking capabilities. The new feature, identified under Microsoft 365 Roadmap ID 495003, will enable users to launch essential applications such as Chat, Teams, […]

The post Microsoft Teams New Update Enhances Productivity & Customization appeared first on Cyber Security News.

Guru Baran

Sale of 23andMe: On the Hot Seat of Congress, States

Ransomware DataBreachToday.com
3 months 1 week ago
Lawmakers Quiz Execs on Security; State AG Seek to Block Sale of Bankrupt Firm
While a Congressional committee grilled 23andMe executives on Tuesday about security and privacy, 28 states filed a lawsuit to stop the sale of the bankrupt genetics testing firm unless the company obtains explicit consent from each customer for the transfer or their information to a third party.

300K Crash Reports Stolen in Texas DOT Hack

Ransomware DataBreachToday.com
3 months 1 week ago
Crash Records and Driver Data Exposed in Texas Transportation Hack
Hackers accessed the Texas Department of Transportation's crash records system using a compromised account, stealing nearly 300,000 reports containing personal and vehicle information that could be used for fraud, the department warned in a letter to impacted individuals.

Managed ad