CVE Alert: CVE-2025-1426
Vulnerability Summary: CVE-2025-1426 Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker...
Vulnerability Summary: CVE-2025-1426 Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker...
Vulnerability Summary: CVE-2024-45777 A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo...
Vulnerability Summary: CVE-2024-53974 Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that...
Vulnerability Summary: CVE-2025-1118 A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown...
Multiple vulnerabilities were identified in Microsoft Products. A remote attacker could exploit some of these vulnerabilities to trigger elevation of...
Vulnerability Summary: CVE-2025-0893 Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability. Affected Endpoints:...
Vulnerability Summary: CVE-2025-0677 A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the...
Vulnerability Summary: CVE-2025-0624 A flaw was found in grub2. During the network boot process, when trying to search for the...
Vulnerability Summary: CVE-2023-51297 A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows...
Vulnerability Summary: CVE-2024-5706 The product receives input from an upstream component, but it does not restrict or incorrectly restricts the...
Vulnerability Summary: CVE-2024-5705 The product performs an authorization check when an actor attempts to access a resource or perform an...
Vulnerability Summary: CVE-2024-37360 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Vulnerability Summary: CVE-2025-24989 An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a...
Vulnerability Summary: CVE-2024-37359 The web server receives a URL or similar request from an upstream component and retrieves the contents...
Vulnerability Summary: CVE-2025-21355 Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a...
Ransomware Group: INCRANSOM VICTIM NAME: ehddcom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Ransomware Group: TERMITE VICTIM NAME: Ligentia NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
CISA and Partners Release Call to Action to Close the National Software Understanding Gap Today, CISA—in partnership with the Defense Advanced...
CISA Releases Three Industrial Control Systems Advisories CISA released three Industrial Control Systems (ICS) advisories on January 21, 2025. These...
CISA Releases Twelve Industrial Control Systems Advisories CISA released twelve Industrial Control Systems (ICS) advisories on January 16, 2025. These...
CISA and FBI Release Updated Guidance on Product Security Bad Practices In partnership with the Federal Bureau of Investigation (FBI),...
CISA Releases Six Industrial Control Systems Advisories CISA released six Industrial Control Systems (ICS) advisories on January 23, 2025. These...
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...