Aggregator
CVE-2025-4044 | Lexmark Universal Print Driver/Printer Software G2 prior 3.0.6.0 on Windows xml external entity reference
CVE-2025-54336 | Plesk Obsidian 18.0.70 LoginManager.php comparison
CVE-2025-50567 | Saurus CMS Community Edition 4.7.1 Query Parameter /e DB::prepare sql injection
CVE-2025-50579 | Nginx Proxy Manager 2.12.3 cross-domain policy
CVE-2024-45062 | OpenPrinting ippusbxd 1.34 stack-based overflow (TALOS-2024-2071)
CVE-2025-43739 | Liferay Portal/DXP Organization information exposure
CVE-2025-50461 | Volcengine verl 3.0.0 Model File scripts/model_merger.py torch.load deserialization
CVE-2025-50897 | riscv-boom SonicBOOM 1.2 Kernel Memory denial of service
CVE-2025-51487 | MoonShine 3.12.3 Link cross site scripting
CVE-2025-51488 | MoonShine 3.12.3 Name cross site scripting
CVE-2025-51489 | MoonShine 3.12.4 SVG File unrestricted upload
Nederland levert luchtverdediging in Polen ter bescherming NAVO en steun aan Oekraïne
Git 2.51 Released With Performance Optimizations and SHA-256 as Default hash Function
Git 2.51.0 has been officially released after an accelerated 8-week development cycle, introducing significant performance improvements and security enhancements that lay the groundwork for the upcoming Git 3.0 major release. The latest version delivers substantial speed improvements for core Git operations, implements SHA-256 as the default hash function, and introduces the reftable format as the […]
The post Git 2.51 Released With Performance Optimizations and SHA-256 as Default hash Function appeared first on Cyber Security News.
Commvault plugs holes in backup suite that allow remote code execution
Commvault has fixed four security vulnerabilities that may allow unauthenticated attackers to compromise on-premises deployments of its flagship backup and replication suite. Technical details about the vulnerabilities have been published on Wednesday by researchers at watchTowr Labs, who also proved that they could be chained together to achieve remote code execution. The researchers refrained from publishing PoC exploits, but their very detailed write-up lowers the barrier for creating them. Admins who run Commvault on-prem should … More →
The post Commvault plugs holes in backup suite that allow remote code execution appeared first on Help Net Security.
Okta Security Releases Auth0 Event Logs for Proactive Threat Detection
Okta has announced the launch of the Auth0 Customer Detection Catalog, a comprehensive open-source repository designed to enhance proactive threat detection capabilities for Auth0 customers. This strategic release represents a significant advancement in identity and access management security, providing security teams with sophisticated detection rules to identify and respond to emerging threats across their authentication […]
The post Okta Security Releases Auth0 Event Logs for Proactive Threat Detection appeared first on Cyber Security News.