Aggregator

CVE-2025-9055 | Axis AXIS OS up to 12.7.30 VAPIX Edge Storage API unnecessary privileges (EUVD-2025-74036)

VulDB Recent Entries
3 months ago
A vulnerability described as critical has been identified in Axis AXIS OS up to 12.7.30. Affected by this vulnerability is an unknown functionality of the component VAPIX Edge Storage API. Such manipulation leads to execution with unnecessary privileges. This vulnerability is documented as CVE-2025-9055. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2025-41244

CVE Trends
3 months ago
Currently trending CVE - Hype Score: 1 - VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this ...

CVE-2025-21043

CVE Trends
3 months ago
Currently trending CVE - Hype Score: 1 - Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

U8cloud 所有版本 NCCloudGatewayServlet 远程命令执行和任意文件上传（基于该漏洞的变种）

先知技术社区
3 months ago
前言2025-09-24 用友又又又发布了一个漏洞 关于U8cloud所有版本NCCloudGatewayServlet接口存在命令执行漏洞的安全公告 这次又是全版本的漏洞但是，我觉得这也可以是文件上传漏洞，往下看吧。https://security.yonyou.com/#/noticeInfo?id=736来来来现热乎的，我们先去分析一波看，官方说的升级补丁升级补丁<U8CLOUD系统

U.S. CISA adds Samsung mobile devices flaw to its Known Exploited Vulnerabilities catalog

Security Affairs
3 months ago
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Samsung mobile devices flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Samsung mobile devices flaw, tracked as CVE-2025-21042  (CVSS score of 8.8), to its Known Exploited Vulnerabilities (KEV) catalog. The now-patched Samsung Galaxy flaw CVE-2025-21042 was exploited as a zero-day […]
Pierluigi Paganini

雷神众测漏洞周报2025.11.3-2025.11.9

雷神众测
3 months ago
雷神众测拥有该文章的修改和解释权。如欲转载或传播此文章，必须保证此文章的副本，包括版权声明等全部内容。声明雷神众测允许，不得任意修改或增减此文章内容，不得以任何方式将其用于商业目的。

Firewalla unveils MSP 2.9 to simplify multi-device network management

Help Net Security
3 months ago

Firewalla has announced the release of MSP 2.9, the latest update to its Managed Security Portal (MSP). The update is now available to all MSP Early Access users. Firewalla MSP is a web-based platform designed for security and infosec professionals to manage multiple Firewalla devices. Version 2.9 introduces new features and improvements to simplify network management, enhance security, and give IT teams greater control. New features in MSP 2.9: Search flows with FireAI: Users can … More →

The post Firewalla unveils MSP 2.9 to simplify multi-device network management appeared first on Help Net Security.

Industry News

Managed ad