Aggregator

CVE-2025-41662 | Weidmueller IE-SR-2TX-WL Main Web Interface tls_iotgen_setting cross-site request forgery (VDE-2025-052 / EUVD-2025-18090)

VulDB Recent Entries
2 months ago
A vulnerability, which was classified as problematic, has been found in Weidmueller IE-SR-2TX-WL, IE-SR-2TX-WL-4G-EU and IE-SR-2TX-WL-4G-US-V. This issue affects the function tls_iotgen_setting of the component Main Web Interface. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2025-41662. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-41661 | Weidmueller IE-SR-2TX-WL Main Web Interface event_mail_test cross-site request forgery (VDE-2025-052 / EUVD-2025-18089)

VulDB Recent Entries
2 months ago
A vulnerability classified as problematic was found in Weidmueller IE-SR-2TX-WL, IE-SR-2TX-WL-4G-EU and IE-SR-2TX-WL-4G-US-V. This vulnerability affects the function event_mail_test of the component Main Web Interface. The manipulation leads to cross-site request forgery. This vulnerability was named CVE-2025-41661. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-41663 | Weidmueller IE-SR-2TX-WL os command injection (VDE-2025-052 / EUVD-2025-18088)

VulDB Recent Entries
2 months ago
A vulnerability classified as critical has been found in Weidmueller IE-SR-2TX-WL, IE-SR-2TX-WL-4G-EU and IE-SR-2TX-WL-4G-US-V. This affects an unknown part. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2025-41663. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-29756 | SunGrow iSolarCloud MQTT Service authorization (EUVD-2025-18091)

VulDB Recent Entries
2 months ago
A vulnerability was found in SunGrow iSolarCloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component MQTT Service. The manipulation leads to missing authorization. This vulnerability is handled as CVE-2025-29756. The attack may be launched remotely. There is no exploit available. This product is a managed service. It is not possible for users to maintain vulnerability countermeasures themselves.
vuldb.com

Microsoft Teams New Update Enhances Productivity & Customization

Cyber Security News
2 months ago

Microsoft has announced a significant productivity enhancement coming to Microsoft 365 that will allow users to open core collaboration applications in separate windows, marking a major step forward in workspace customization and multitasking capabilities. The new feature, identified under Microsoft 365 Roadmap ID 495003, will enable users to launch essential applications such as Chat, Teams, […]

The post Microsoft Teams New Update Enhances Productivity & Customization appeared first on Cyber Security News.

Guru Baran

Sale of 23andMe: On the Hot Seat of Congress, States

Ransomware DataBreachToday.com
2 months ago
Lawmakers Quiz Execs on Security; State AG Seek to Block Sale of Bankrupt Firm
While a Congressional committee grilled 23andMe executives on Tuesday about security and privacy, 28 states filed a lawsuit to stop the sale of the bankrupt genetics testing firm unless the company obtains explicit consent from each customer for the transfer or their information to a third party.

300K Crash Reports Stolen in Texas DOT Hack

Ransomware DataBreachToday.com
2 months ago
Crash Records and Driver Data Exposed in Texas Transportation Hack
Hackers accessed the Texas Department of Transportation's crash records system using a compromised account, stealing nearly 300,000 reports containing personal and vehicle information that could be used for fraud, the department warned in a letter to impacted individuals.

How to Get a Clearer Picture of Vendor Risk

Ransomware DataBreachToday.com
2 months ago
Experts Call for Continuous Assessments of Vendor Risk - Not Just at Onboarding
As vendor ecosystems grow in complexity, many organizations still view third-party risk management as a static assessment of vendors as they're onboarded. But organizations often focus too heavily on upfront vetting of vendors and fail to track how their risk profiles may change over time.

CVE-2025-5485 | SinoTrack IOT PC Platform up to 8.6 Web Management Interface observable response discrepancy (icsa-25-160-01)

VulDB Recent Entries
2 months ago
A vulnerability was found in SinoTrack IOT PC Platform up to 8.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Management Interface. The manipulation leads to observable response discrepancy. This vulnerability is known as CVE-2025-5485. The attack can be launched remotely. There is no exploit available.
vuldb.com

Managed ad