CVE Alert: CVE-2025-20158
Vulnerability Summary: CVE-2025-20158 A vulnerability in the debug shell of Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series...
threatintel
CVE Alert: CVE-2024-52541
Vulnerability Summary: CVE-2024-52541 Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could...
CVE Alert: CVE-2023-47160
Vulnerability Summary: CVE-2023-47160 IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to an XML External...
CVE Alert: CVE-2025-27089
Vulnerability Summary: CVE-2025-27089 Directus is a real-time API and App dashboard for managing SQL database content. In affected versions if...
CVE Alert: CVE-2025-1118
Vulnerability Summary: CVE-2025-1118 A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown...
CVE Alert: CVE-2024-53974
Vulnerability Summary: CVE-2024-53974 Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that...
CVE Alert: CVE-2024-45777
Vulnerability Summary: CVE-2024-45777 A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo...
CVE Alert: CVE-2025-1426
Vulnerability Summary: CVE-2025-1426 Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker...
CVE Alert: CVE-2025-1006
Vulnerability Summary: CVE-2025-1006 Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially...
CVE Alert: CVE-2024-5706
Vulnerability Summary: CVE-2024-5706 The product receives input from an upstream component, but it does not restrict or incorrectly restricts the...
CVE Alert: CVE-2023-51297
Vulnerability Summary: CVE-2023-51297 A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Hotel Booking System v4.0 allows...
CVE Alert: CVE-2025-0624
Vulnerability Summary: CVE-2025-0624 A flaw was found in grub2. During the network boot process, when trying to search for the...
CVE Alert: CVE-2025-0677
Vulnerability Summary: CVE-2025-0677 A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the...
CVE Alert: CVE-2025-0893
Vulnerability Summary: CVE-2025-0893 Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability. Affected Endpoints:...
CVE Alert: CVE-2025-24989
Vulnerability Summary: CVE-2025-24989 An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a...
CVE Alert: CVE-2024-37360
Vulnerability Summary: CVE-2024-37360 Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
CVE Alert: CVE-2024-5705
Vulnerability Summary: CVE-2024-5705 The product performs an authorization check when an actor attempts to access a resource or perform an...
CVE Alert: CVE-2025-21355
Vulnerability Summary: CVE-2025-21355 Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a...
CVE Alert: CVE-2024-37359
Vulnerability Summary: CVE-2024-37359 The web server receives a URL or similar request from an upstream component and retrieves the contents...
[INCRANSOM] – Ransomware Victim: ehdd[.]com
Ransomware Group: INCRANSOM VICTIM NAME: ehddcom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[TERMITE] – Ransomware Victim: Ligentia
Ransomware Group: TERMITE VICTIM NAME: Ligentia NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
CISA: CISA Releases Twelve Industrial Control Systems Advisories
CISA Releases Twelve Industrial Control Systems Advisories CISA released twelve Industrial Control Systems (ICS) advisories on January 16, 2025. These...
CISA: CISA Releases Three Industrial Control Systems Advisories
CISA Releases Three Industrial Control Systems Advisories CISA released three Industrial Control Systems (ICS) advisories on January 21, 2025. These...
CISA: CISA and Partners Release Call to Action to Close the National Software Understanding Gap
CISA and Partners Release Call to Action to Close the National Software Understanding Gap Today, CISA—in partnership with the Defense Advanced...
