CVE Alert: CVE-2025-52876
Vulnerability Summary: CVE-2025-52876 In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible Affected Endpoints: No affected...
Month: June 2025
CVE Alert: CVE-2025-52967
Vulnerability Summary: CVE-2025-52967 gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation. Affected Endpoints: No affected endpoints listed. Published Date: 6/23/2025,...
CVE Alert: CVE-2025-4563
Vulnerability Summary: CVE-2025-4563 A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks....
[AKIRA] – Ransomware Victim: Seppeler Gruppe
Ransomware Group: AKIRA VICTIM NAME: Seppeler Gruppe NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[AKIRA] – Ransomware Victim: Access Financial
Ransomware Group: AKIRA VICTIM NAME: Access Financial NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[LYNX] – Ransomware Victim: Inflite Engineering Services
Ransomware Group: LYNX VICTIM NAME: Inflite Engineering Services NOTE: No files or stolen information are by RedPacket Security. Any legal...
[SARCOMA] – Ransomware Victim: Machu Picchu Foods
Ransomware Group: SARCOMA VICTIM NAME: Machu Picchu Foods NOTE: No files or stolen information are by RedPacket Security. Any legal...
[WORLDLEAKS] – Ransomware Victim: Myrtue Medical Center Hospital
Ransomware Group: WORLDLEAKS VICTIM NAME: Myrtue Medical Center Hospital NOTE: No files or stolen information are by RedPacket Security. Any...
CVE Alert: CVE-2025-6511
Vulnerability Summary: CVE-2025-6511 A vulnerability classified as critical has been found in Netgear EX6150 1.0.0.46_1.0.76. This affects the function sub_410090....
CVE Alert: CVE-2025-6510
Vulnerability Summary: CVE-2025-6510 A vulnerability was found in Netgear EX6100 1.0.2.28_1.1.138. It has been rated as critical. Affected by this...
CVE Alert: CVE-2025-6516
Vulnerability Summary: CVE-2025-6516 A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects...
CVE Alert: CVE-2025-52969
Vulnerability Summary: CVE-2025-52969 ClickHouse 25.7.1.557 allows low-privileged users to execute shell commands by querying existing Executable() tables created by higher-privileged...
CVE Alert: CVE-2025-6509
Vulnerability Summary: CVE-2025-6509 A vulnerability was found in seaswalker spring-analysis up to 4379cce848af96997a9d7ef91d594aa129be8d71. It has been declared as problematic. Affected...
CVE Alert: CVE-2025-49144
Vulnerability Summary: CVE-2025-49144 Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation...
CVE Alert: CVE-2025-6518
Vulnerability Summary: CVE-2025-6518 A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected...
CVE Alert: CVE-2021-47688
Vulnerability Summary: CVE-2021-47688 In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2, a user with local access to a server can bypass...
CVE Alert: CVE-2025-49126
Vulnerability Summary: CVE-2025-49126 Visionatrix is an AI Media processing tool using ComfyUI. In versions 1.5.0 to before 2.5.1, the /docs/flows...
CVE Alert: CVE-2025-6517
Vulnerability Summary: CVE-2025-6517 A vulnerability was found in Dromara MaxKey up to 4.1.7 and classified as critical. This issue affects...
BugCrowd Bug Bounty Disclosure: P3 – RXSS at `https://skyview.gsfc.nasa.gov/current/cgi/vo/sia.pl` – GxbNt
RXSS at `https://skyview.gsfc.nasa.gov/current/cgi/vo/sia.pl` RXSS at `https://skyview.gsfc.nasa.gov/current/cgi/vo/sia.pl` Researcher: GxbNt Engagement: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program Disclosed...
BugCrowd Bug Bounty Disclosure: P3 – NASA-User Owned PDF Publicly Exposed with Full Edit Rights — Risk of Deletion and PII Disclosure –
NASA-User Owned PDF Publicly Exposed with Full Edit Rights — Risk of Deletion and PII Disclosure NASA-User Owned PDF Publicly...
BugCrowd Bug Bounty Disclosure: P5 – Sensitive NASA Equipment Inventory Disclosed via Public Endpoint on www3.nasa.gov – candykhaba
Sensitive NASA Equipment Inventory Disclosed via Public Endpoint on www3.nasa.gov Sensitive NASA Equipment Inventory Disclosed via Public Endpoint on www3.nasa.gov...
Breaking The Nerd Internet: Three Overlapping Generations Of Tech History – Inone Selfie
Sysinternals founder Mark Russinovich's after-dinner photo just flipped the nerd world into Kardashian-like levels of internet meltdown.Russinovich posted a selfie...
Economists Sceptical Over Uk Spending Review’s Partly Ai Driven 10% Budget Cuts
Leading economists have questioned how the UK government's Spending Review can determine exactly 10 percent cuts to admin budgets —...
The One Thing Sme It Can Do That The Big Guys Can’t: Change The World
Opinion The smaller the org, the better the jobs. Not universally true, but a good rule of thumb. Small organizations...
