Aggregator

Please support the site operations by clicking ads.

CVE-2025-10157 | mmaitre314 picklescan up to 0.0.30 protection mechanism (EUVD-2025-29711)

11 months 3 weeks ago

A vulnerability, which was classified as critical, has been found in mmaitre314 picklescan up to 0.0.30. This issue affects some unknown processing. The manipulation leads to protection mechanism failure. This vulnerability is uniquely identified as CVE-2025-10157. The attack is possible to be carried out remotely. No exploit exists.

vuldb.com

CVE-2025-6633 | Autodesk 3ds Max 2020/2021/2021.3.8/2022/2022.3.3 RBG File Parser out-of-bounds write (EUVD-2025-23876)

Vuldb Updates

11 months 3 weeks ago

A vulnerability categorized as critical has been discovered in Autodesk 3ds Max 2020/2021/2021.3.8/2022/2022.3.3. Impacted is an unknown function of the component RBG File Parser. Such manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2025-6633. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

vuldb.com

CVE-2025-34057 | Ruijie NBR2000G/NBR1300G/NBR1000 /WEB_VMS/LEVEL15/ information disclosure (EUVD-2025-19723)

Vuldb Updates

11 months 3 weeks ago

A vulnerability labeled as problematic has been found in Ruijie NBR2000G, NBR1300G and NBR1000. The impacted element is an unknown function of the file /WEB_VMS/LEVEL15/. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-2025-34057. The attack may be performed from remote. There is no available exploit.

vuldb.com

CVE-2025-6436 | Mozilla Thunderbird up to 139 memory corruption (EUVD-2025-19098 / Nessus ID 240334)

Vuldb Updates

11 months 3 weeks ago

A vulnerability classified as critical was found in Mozilla Thunderbird up to 139. Affected by this issue is some unknown functionality. Such manipulation leads to memory corruption. This vulnerability is traded as CVE-2025-6436. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

vuldb.com

graphQL查询中存在的ssrf

迪哥讲事

11 months 3 weeks ago

CSOP2025看点 | 中建电商吴俊雄：打造下一代安全运营体系的关键要素

安全威胁情报

11 months 3 weeks ago

CSOP2025重庆站亮点前瞻

伪装成银狐专杀工具某黑产钓鱼样本分析

安全分析与研究

11 months 3 weeks ago

伪装成银狐专杀工具某黑产钓鱼样本分析

CVE-2025-12967 | Amazon JDBC Wrapper up to 2.6.4 Relational Database Service externally-controlled input to select classes or code (GHSA-7wq2-32h4-9hc9 / EUVD-2025-48942)

Vuldb Updates

11 months 3 weeks ago

A vulnerability described as critical has been identified in Amazon JDBC Wrapper, Go Wrapper, NodeJS Wrapper, Python Wrapper and ODBC driver up to 2.6.4. The impacted element is an unknown function of the component Relational Database Service. Executing manipulation can lead to use of externally-controlled input to select classes or code. This vulnerability is handled as CVE-2025-12967. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

vuldb.com

CVE-2025-64523 | filebrowser up to 2.45.0 improper authorization (GHSA-6cqf-cfhv-659g / EUVD-2025-150363)

Vuldb Updates

11 months 3 weeks ago

A vulnerability marked as critical has been reported in filebrowser up to 2.45.0. Affected is an unknown function. This manipulation causes improper authorization. This vulnerability is tracked as CVE-2025-64523. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

vuldb.com

CVE-2025-12110 | Red Hat Keycloak session expiration (EUVD-2025-35690 / WID-SEC-2025-2401)

Vuldb Updates

11 months 3 weeks ago

A vulnerability classified as critical has been found in Red Hat Keycloak. Affected by this issue is some unknown functionality. This manipulation causes session expiration. This vulnerability is handled as CVE-2025-12110. The attack can be initiated remotely. There is not any exploit available.

vuldb.com

Authentication Provider Types: A Guide to Best Practices

Security Boulevard

11 months 3 weeks ago

Explore different authentication provider types (social, passwordless, MFA) and learn best practices for choosing the right one to enhance security and user experience in your applications.

The post Authentication Provider Types: A Guide to Best Practices appeared first on Security Boulevard.

MojoAuth - Advanced Authentication & Identity Solutions