CVE Alert: CVE-2025-6004
Vulnerability Summary: CVE-2025-6004 Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods....
CVE Alert: CVE-2025-6000
Vulnerability Summary: CVE-2025-6000 A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution...
CVE Alert: CVE-2025-8475
Vulnerability Summary: CVE-2025-8475 Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute...
CVE Alert: CVE-2025-5999
Vulnerability Summary: CVE-2025-5999 A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own...
CVE Alert: CVE-2025-8474
Vulnerability Summary: CVE-2025-8474 Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute...
CVE Alert: CVE-2025-8473
Vulnerability Summary: CVE-2025-8473 Alpine iLX-507 UPDM_wstpCBCUpdStart Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on...
CVE Alert: CVE-2025-8480
Vulnerability Summary: CVE-2025-8480 Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network-adjacent attackers to execute arbitrary code on...
CVE Alert: CVE-2025-8477
Vulnerability Summary: CVE-2025-8477 Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to...
CVE Alert: CVE-2025-6037
Vulnerability Summary: CVE-2025-6037 Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured...
CVE Alert: CVE-2025-6015
Vulnerability Summary: CVE-2025-6015 Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be...
CVE Alert: CVE-2025-8472
Vulnerability Summary: CVE-2025-8472 Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to...
CVE Alert: CVE-2025-8476
Vulnerability Summary: CVE-2025-8476 Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on...
CVE Alert: CVE-2025-54424
Vulnerability Summary: CVE-2025-54424 1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on...
CVE Alert: CVE-2025-54132
Vulnerability Summary: CVE-2025-54132 Cursor is a code editor built for programming with AI. In versions below 1.3, Mermaid (which is...
CVE Alert: CVE-2024-13978
Vulnerability Summary: CVE-2024-13978 A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by...
CVE Alert: CVE-2025-54131
Vulnerability Summary: CVE-2025-54131 Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can...
Aws Lambda Loves Charging For Idle Time: Vercel Claims It Found A Way To Dodgethe Bill
Vercel claims it's slashed AWS Lambda costs by up to 95 percent by reusing idle instances that would otherwise rack...
CVE Alert: CVE-2025-8401
Vulnerability Summary: CVE-2025-8401 The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure...
CVE Alert: CVE-2025-8382
Vulnerability Summary: CVE-2025-8382 A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0. Affected...
CVE Alert: CVE-2025-8381
Vulnerability Summary: CVE-2025-8381 A vulnerability, which was classified as critical, has been found in Campcodes Online Hotel Reservation System 1.0....
CVE Alert: CVE-2025-8151
Vulnerability Summary: CVE-2025-8151 The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Path Traversal in...
CVE Alert: CVE-2025-8068
Vulnerability Summary: CVE-2025-8068 The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and...
CVE Alert: CVE-2025-8407
Vulnerability Summary: CVE-2025-8407 A vulnerability, which was classified as critical, has been found in code-projects Vehicle Management 1.0. This issue...
CVE Alert: CVE-2025-8213
Vulnerability Summary: CVE-2025-8213 The NinjaScanner – Virus & Malware scan plugin for WordPress is vulnerable to arbitrary file deletion due...
