Aggregator

A vulnerability, which was classified as problematic, has been found in Zenitel TCIV-3+. The impacted element is an unknown function. The manipulation leads to cross site scripting. This vulnerability is listed as CVE-2025-64130. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Zenitel TCIV-3+. The affected element is an unknown function. Executing manipulation can lead to out-of-bounds write. This vulnerability is tracked as CVE-2025-64129. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Zenitel TCIV-3+. Impacted is an unknown function. Performing manipulation results in os command injection. This vulnerability is identified as CVE-2025-64128. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Zenitel TCIV-3+. This issue affects some unknown processing. Such manipulation leads to os command injection. This vulnerability is referenced as CVE-2025-64127. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Zenitel TCIV-3+. This vulnerability affects unknown code. This manipulation causes os command injection. The identification of this vulnerability is CVE-2025-64126. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

在特定场景下，该漏洞可能导致新配置的用户被识别为已存在的内部账号，进而引发账号冒充或权限提升风险。

该漏洞对采用虚拟桌面基础架构管理非持久性企业环境的机构影响尤为严重。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

Your inbox is probably drowning in Black Friday emails right now. Another “limited time offer” that’ll reappear next month, countdown timer creating artificial urgency. You’re right to be skeptical — most of it is noise. But buried beneath the marketing chaos, Black Friday can represent genuine opportunities to save significantly. The cybersecurity industry projects 4.8 million open positions globally in 2025, according to ISC2, with the market expected to reach $377 billion by 2028. Yet … More →

The post Black Friday 2025 for InfoSec: How to spot real value and avoid the noise appeared first on Help Net Security.

A vulnerability labeled as critical has been found in Opto 22 groov View. This affects an unknown part. The manipulation results in exposure of sensitive information through metadata. This vulnerability was named CVE-2025-13084. The attack may be performed from remote. There is no available exploit. It is advisable to implement a patch to correct this issue.

A vulnerability identified as critical has been detected in Deciso OPNsense. Affected by this issue is some unknown functionality of the file diag_backup.php. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2025-13698. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Houzez Plugin up to 4.1.6 on WordPress. Affected by this vulnerability is the function houzez_property_img_upload of the component SVG File Handler. Executing manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2025-9163. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in Houzez Plugin up to 4.1.6 on WordPress. It has been rated as critical. Affected is an unknown function of the file saved-search-item.php of the component Saved Search Handler. Performing manipulation results in deserialization. This vulnerability is known as CVE-2025-9191. Remote exploitation of the attack is possible. No exploit is available.

Identity security has reached a tipping point. Stronger locks are no longer enough when adversar

A look at why identity security is failing in the age of deepfakes and AI-driven attacks, and how biometrics, MFA, PAD, and high-assurance verification must evolve to deliver true, phishing-resistant authentication.

The post How AI Threats Have Broken Strong Authentication  appeared first on Security Boulevard.

A vulnerability was found in GeoServer up to 2.24.x. It has been declared as problematic. This impacts an unknown function. Such manipulation of the argument SLD_BODY leads to cross site scripting. This vulnerability is traded as CVE-2025-21621. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in bytecodealliance wasm-micro-runtime up to 2.4.3. It has been classified as critical. This affects an unknown function. This manipulation causes memory corruption. This vulnerability appears as CVE-2025-64713. The attack requires local access. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in bytecodealliance wasm-micro-runtime up to 2.4.3 and classified as problematic. The impacted element is an unknown function. The manipulation results in improper check for unusual conditions. This vulnerability is reported as CVE-2025-64704. The attack requires a local approach. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability has been found in iiDk-the-actual Console up to 2.7.x and classified as critical. The affected element is an unknown function. The manipulation leads to path traversal. This vulnerability is documented as CVE-2025-65952. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.