Everest
You must login to view this content
Aggregator
CVE-2012-2588 | MailEnable 6.5 cross site scripting (EDB-20351 / XFDB-77547)
9 months 1 week ago
A vulnerability categorized as problematic has been discovered in MailEnable 6.5. The affected element is an unknown function. The manipulation results in cross site scripting.
This vulnerability is reported as CVE-2012-2588. The attack can be launched remotely. Moreover, an exploit is present.
vuldb.com
CVE-2012-2206 | IBM WebSphere MQ 7.0.3/7.0.4 access control (ID 1607481 / EDB-20478)
9 months 1 week ago
A vulnerability categorized as problematic has been discovered in IBM WebSphere MQ 7.0.3/7.0.4. Affected is an unknown function. Such manipulation leads to improper access controls.
This vulnerability is uniquely identified as CVE-2012-2206. The attack can be launched remotely. Moreover, an exploit is present.
It is advisable to implement a patch to correct this issue.
vuldb.com
CVE-2012-4680 | IOServer 1.0.18.0 path traversal (EDB-20677 / XFDB-77904)
9 months 1 week ago
A vulnerability identified as problematic has been detected in IOServer 1.0.18.0. This impacts an unknown function. Performing manipulation results in path traversal.
This vulnerability is reported as CVE-2012-4680. The attack is possible to be carried out remotely. Moreover, an exploit is present.
You should upgrade the affected component.
vuldb.com
CVE-2012-2171 | IBM Ds4100 1724 ModuleServlet.do selectedModuleOnly sql injection (EDB-19321 / XFDB-75236)
9 months 1 week ago
A vulnerability marked as critical has been reported in IBM Ds4100 1724. The impacted element is an unknown function of the file ModuleServlet.do. The manipulation of the argument selectedModuleOnly leads to sql injection.
This vulnerability is traded as CVE-2012-2171. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2012-3294 | IBM WebSphere MQ 7.0.3/7.0.4/7.5 cross-site request forgery (ID 1607482 / EDB-20477)
9 months 1 week ago
A vulnerability identified as problematic has been detected in IBM WebSphere MQ 7.0.3/7.0.4/7.5. Affected by this vulnerability is an unknown functionality. Performing manipulation results in cross-site request forgery.
This vulnerability was named CVE-2012-3294. The attack may be initiated remotely. In addition, an exploit is available.
Applying a patch is the recommended action to fix this issue.
vuldb.com
Qilin
9 months 1 week ago
You must login to view this content
cohenido
Lynx
9 months 1 week ago
You must login to view this content
cohenido
CSAW CTF Qualification Round 2025
9 months 1 week ago
Name: CSAW CTF Qualification Round 2025 (an CSAW CTF Qualification Round event.)
Date: Sept. 12, 2025, 4 p.m. — 14 Sept. 2025, 16:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.csaw.io/
Rating weight: 16.47
Event organizers: NYUSEC
Date: Sept. 12, 2025, 4 p.m. — 14 Sept. 2025, 16:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.csaw.io/
Rating weight: 16.47
Event organizers: NYUSEC
07CTF
9 months 1 week ago
Name: 07CTF (an 07CTF event.)
Date: Sept. 13, 2025, 6:30 a.m. — 14 Sept. 2025, 18:30 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.0bscuri7y.xyz/
Rating weight: 23.75
Event organizers: 0bscuri7y
Date: Sept. 13, 2025, 6:30 a.m. — 14 Sept. 2025, 18:30 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.0bscuri7y.xyz/
Rating weight: 23.75
Event organizers: 0bscuri7y
Alfa Surfing CTF
9 months 1 week ago
Name: Alfa Surfing CTF (an Alfa CTF event.)
Date: Sept. 13, 2025, 9 a.m. — 14 Sept. 2025, 15:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://alfactf.ru/
Rating weight: 21.67
Event organizers: SPbCTF
Date: Sept. 13, 2025, 9 a.m. — 14 Sept. 2025, 15:00 UTC [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://alfactf.ru/
Rating weight: 21.67
Event organizers: SPbCTF
Achieve Independence in NHI and Secrets Management
9 months 1 week ago
Why should NHI and Secrets Management Matter to Businesses? How often do businesses rethink their cybersecurity strategy to ensure it is all-inclusive and fool-proof? A comprehensive data protection plan cannot overlook the need for Non-Human Identities (NHIs) and Secrets Management. Regrettably, this crucial aspect is often overlooked, leading to severe loopholes in a company’s data […]
The post Achieve Independence in NHI and Secrets Management appeared first on Entro.
The post Achieve Independence in NHI and Secrets Management appeared first on Security Boulevard.
Alison Mack
Relax With Advanced Non-Human Identity Protections
9 months 1 week ago
Are Your Cloud Operations Truly Secure? Let’s face it: Companies are leveraging diverse technologies to stay competitive and efficient. Essentially, many operations are migrating to the cloud to facilitate seamless business processes. But as we embrace this technological evolution, one question becomes critical: “Is your cloud secure?” Moreover, can you relax knowing your sensitive data […]
The post Relax With Advanced Non-Human Identity Protections appeared first on Entro.
The post Relax With Advanced Non-Human Identity Protections appeared first on Security Boulevard.
Alison Mack
CVE-2025-32996 | chimurai http-proxy-middleware up to 2.0.7/3.0.3 writeBody control flow (EUVD-2025-11356 / Nessus ID 264713)
9 months 1 week ago
A vulnerability labeled as problematic has been found in chimurai http-proxy-middleware up to 2.0.7/3.0.3. This vulnerability affects the function writeBody. The manipulation results in incorrect control flow.
This vulnerability is reported as CVE-2025-32996. The attack can be launched remotely. No exploit exists.
The affected component should be upgraded.
vuldb.com
CVE-2025-32997 | chimurai http-proxy-middleware up to 2.0.8/3.0.4 fixRequestBody unusual condition (EUVD-2025-11355 / Nessus ID 264714)
9 months 1 week ago
A vulnerability marked as problematic has been reported in chimurai http-proxy-middleware up to 2.0.8/3.0.4. This issue affects the function fixRequestBody. This manipulation causes improper check for unusual conditions.
This vulnerability appears as CVE-2025-32997. The attack may be initiated remotely. There is no available exploit.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2018-14732 | webpack-dev-server up to 3.1.5 WebSocket Server lib/Server.js Request input validation (Nessus ID 264716)
9 months 1 week ago
A vulnerability described as critical has been identified in webpack-dev-server up to 3.1.5. Impacted is an unknown function in the library lib/Server.js of the component WebSocket Server. Executing manipulation as part of Request can lead to improper input validation.
This vulnerability is registered as CVE-2018-14732. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is recommended.
vuldb.com
CVE-2025-39736 | Linux Kernel up to 6.17-rc1 kmemleak pr_warn deadlock (Nessus ID 264719 / WID-SEC-2025-2040)
9 months 1 week ago
A vulnerability has been found in Linux Kernel up to 6.17-rc1 and classified as critical. This affects the function pr_warn of the component kmemleak. Performing manipulation results in deadlock.
This vulnerability is known as CVE-2025-39736. Access to the local network is required for this attack. No exploit is available.
The affected component should be upgraded.
vuldb.com
CVE-2025-39779 | Linux Kernel up to 6.12.43/6.16.3/6.17-rc2 btrfs_subpage_set_writeback assertion (Nessus ID 264725 / WID-SEC-2025-2040)
9 months 1 week ago
A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.43/6.16.3/6.17-rc2. This issue affects the function btrfs_subpage_set_writeback. Such manipulation leads to reachable assertion.
This vulnerability is referenced as CVE-2025-39779. The attack needs to be initiated within the local network. No exploit is available.
The affected component should be upgraded.
vuldb.com
CVE-2025-39786 | Linux Kernel up to 6.16.3 iio syscalib_mode out-of-bounds (Nessus ID 264727 / WID-SEC-2025-2040)
9 months 1 week ago
A vulnerability was found in Linux Kernel up to 6.16.3. It has been classified as critical. This affects the function syscalib_mode of the component iio. The manipulation leads to out-of-bounds read.
This vulnerability is traded as CVE-2025-39786. Access to the local network is required for this attack to succeed. There is no exploit available.
Upgrading the affected component is recommended.
vuldb.com
CVE-2024-7344
9 months 1 week ago
Currently trending CVE - Hype Score: 9 - Howyar UEFI Application "Reloader" (32-bit and 64-bit) is vulnerable to execution of unsigned software in a hardcoded path.