Aggregator

CVE-2023-34797 | Termenos CWX 8.5.6 Registration Page /Registration.aspx access control (EUVD-2023-38838)

Vuldb Updates
5 months 1 week ago
A vulnerability, which was classified as critical, has been found in Termenos CWX 8.5.6. Affected by this vulnerability is an unknown functionality of the file /Registration.aspx of the component Registration Page. This manipulation causes improper access controls. This vulnerability is registered as CVE-2023-34797. The attack requires access to the local network. No exploit is available.
vuldb.com

CVE-2023-34798 | eoffice up to 9.4 File unrestricted upload (EUVD-2023-38839)

Vuldb Updates
5 months 1 week ago
A vulnerability was found in eoffice up to 9.4 and classified as problematic. Affected by this issue is some unknown functionality of the component File Handler. Executing a manipulation can lead to unrestricted upload. This vulnerability is handled as CVE-2023-34798. The attack can only be done within the local network. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2023-34796 | dmarcts-report-viewer 1.1 org_name/domain cross site scripting (EUVD-2023-38837)

Vuldb Updates
5 months 1 week ago
A vulnerability described as problematic has been identified in dmarcts-report-viewer 1.1. This affects an unknown function. Executing a manipulation of the argument org_name/domain can lead to cross site scripting. The identification of this vulnerability is CVE-2023-34796. The attack may be launched remotely. There is no exploit available. It is best practice to apply a patch to resolve this issue.
vuldb.com

CVE-2025-39928 | Linux Kernel up to 6.16.7 SFP Module rtl9300_i2c_config_xfer missing initialization (EUVD-2025-31823 / Nessus ID 269663)

Vuldb Updates
5 months 1 week ago
A vulnerability has been found in Linux Kernel up to 6.16.7 and classified as critical. The affected element is the function rtl9300_i2c_config_xfer of the component SFP Module. This manipulation causes missing initialization of a variable. This vulnerability is tracked as CVE-2025-39928. The attack is only possible within the local network. No exploit exists. The affected component should be upgraded.
vuldb.com

CVE-2025-39926 | Linux Kernel up to 6.12.47/6.16.7 genl_bind permission (EUVD-2025-31825 / Nessus ID 269670)

Vuldb Updates
5 months 1 week ago
A vulnerability classified as critical has been found in Linux Kernel up to 6.12.47/6.16.7. This affects the function genl_bind. Performing a manipulation results in permission issues. This vulnerability was named CVE-2025-39926. The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-39925 | Linux Kernel up to 6.16.7 j1939_sk_bind privilege escalation (EUVD-2025-31826 / Nessus ID 276945)

Vuldb Updates
5 months 1 week ago
A vulnerability classified as critical was found in Linux Kernel up to 6.16.7. This vulnerability affects the function j1939_sk_bind. Executing a manipulation can lead to privilege escalation. The identification of this vulnerability is CVE-2025-39925. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-39927 | Linux Kernel up to 6.12.47/6.16.7 ceph_mdsc_release_request race condition (EUVD-2025-31824 / WID-SEC-2025-2170)

Vuldb Updates
5 months 1 week ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.47/6.16.7. This issue affects the function ceph_mdsc_release_request. The manipulation leads to race condition. This vulnerability is referenced as CVE-2025-39927. The attack needs to be initiated within the local network. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-39924 | Linux Kernel up to 6.16.7 erofs privilege escalation (EUVD-2025-31827 / Nessus ID 269667)

Vuldb Updates
5 months 1 week ago
A vulnerability described as critical has been identified in Linux Kernel up to 6.16.7. Affected by this issue is some unknown functionality of the component erofs. Such manipulation leads to privilege escalation. This vulnerability is uniquely identified as CVE-2025-39924. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is recommended.
vuldb.com

CVE-2024-33688 | Extend Themes Teluro Plugin up to 1.0.31 on WordPress cross-site request forgery (EUVD-2024-31400)

Vuldb Updates
5 months 1 week ago
A vulnerability, which was classified as problematic, was found in Extend Themes Teluro Plugin up to 1.0.31 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation results in cross-site request forgery. This vulnerability is reported as CVE-2024-33688. The attack can be launched remotely. No exploit exists.
vuldb.com

CLOP

Dark Feed IO
5 months 1 week ago

You must login to view this content

cohenido

CLOP

Dark Feed IO
5 months 1 week ago

You must login to view this content

cohenido

VECT

Dark Feed IO
5 months 1 week ago

You must login to view this content

cohenido

Astaroth banking Trojan spreads in Brazil via WhatsApp worm

Security Affairs
5 months 1 week ago
A WhatsApp worm spread the Astaroth banking trojan across Brazil by automatically sending malicious messages to victims’ contacts. Astaroth, a long-running Brazilian banking malware, has evolved in a new campaign dubbed Boto Cor-de-Rosa by abusing WhatsApp Web for propagation. The malware harvests the victim’s WhatsApp contact list and automatically sends malicious messages to each contact, […]
Pierluigi Paganini

CrowdStrike to buy identity startup SGNL for nearly $740M

CyberScoop
5 months 1 week ago

CrowdStrike is buying identity management startup SGNL, a move that underscores how identity security has become a central battleground in enterprise cybersecurity as companies add cloud services and deploy AI-driven tools. The cybersecurity firm did not disclose financial terms in a Thursday announcement, but CrowdStrike CEO George Kurtz told CNBC the deal is valued at […]

The post CrowdStrike to buy identity startup SGNL for nearly $740M appeared first on CyberScoop.

Greg Otto

Managed ad