Aggregator

CVE-2025-3085 | MongoDB Server up to 5.0.30/6.0.19/7.0.15/8.0.3 on Linux Certificate Chain improper check for certificate revocation (Nessus ID 264379)

Vuldb Updates
10 months ago
A vulnerability, which was classified as critical, was found in MongoDB Server up to 5.0.30/6.0.19/7.0.15/8.0.3 on Linux. Affected by this vulnerability is an unknown functionality of the component Certificate Chain Handler. Such manipulation leads to improper check for certificate revocation. This vulnerability is traded as CVE-2025-3085. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.
vuldb.com

CVE-2025-8277 | Red Hat Enterprise Linux/OpenShift Container Platform libssh memory leak (Nessus ID 264494)

Vuldb Updates
10 months ago
A vulnerability, which was classified as problematic, was found in Red Hat Enterprise Linux and OpenShift Container Platform. Affected by this issue is some unknown functionality of the component libssh. Such manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2025-8277. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2024-47674 | Linux Kernel up to 6.1.110/6.6.51/6.10.10 mmap reference count (Nessus ID 209512 / WID-SEC-2024-3182)

Vuldb Updates
10 months ago
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.1.110/6.6.51/6.10.10. This issue affects the function mmap. The manipulation leads to improper update of reference count. This vulnerability is documented as CVE-2024-47674. The attack requires being on the local network. Additionally, an exploit exists. It is suggested to upgrade the affected component.
vuldb.com

Top 10 Best Cloud Penetration Testing Companies in 2025

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
10 months ago

Cloud is the foundation of modern business, but it comes with a complex and evolving security landscape. Traditional penetration testing, which focuses on on-premise networks and applications, is not sufficient to secure these dynamic environments. Cloud penetration testing requires specialized expertise to identify and exploit vulnerabilities unique to cloud-native architectures, including misconfigurations, insecure identity and […]

The post Top 10 Best Cloud Penetration Testing Companies in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Varshini

CVE-2025-48544

CVE Trends
10 months ago
Currently trending CVE - Hype Score: 16 - In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-53804 | Microsoft Windows up to Server 2025 Kernel-Mode Driver information disclosure

Vuldb Updates
10 months ago
A vulnerability, which was classified as problematic, has been found in Microsoft Windows. Affected by this issue is some unknown functionality of the component Kernel-Mode Driver. Performing manipulation results in information disclosure. This vulnerability is reported as CVE-2025-53804. The attack requires a local approach. No exploit exists. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-53806 | Microsoft Windows Server 2008 R2 SP1 up to Server 2022 23H2 RRAS buffer over-read (Nessus ID 261817)

Vuldb Updates
10 months ago
A vulnerability has been found in Microsoft Windows and classified as problematic. This vulnerability affects unknown code of the component RRAS. The manipulation leads to buffer over-read. This vulnerability is traded as CVE-2025-53806. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to install a patch to address this issue.
vuldb.com

CVE-2025-53808 | Microsoft Windows up to Server 2025 Defender Firewall Service type confusion

Vuldb Updates
10 months ago
A vulnerability was found in Microsoft Windows. It has been classified as critical. Impacted is an unknown function of the component Defender Firewall Service. This manipulation causes type confusion. This vulnerability is handled as CVE-2025-53808. It is possible to launch the attack on the local host. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

Managed ad