Aggregator

CVE-2024-47674 | Linux Kernel up to 6.1.110/6.6.51/6.10.10 mmap reference count (Nessus ID 209512 / WID-SEC-2024-3182)

Vuldb Updates
9 months 2 weeks ago
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.1.110/6.6.51/6.10.10. This issue affects the function mmap. The manipulation leads to improper update of reference count. This vulnerability is documented as CVE-2024-47674. The attack requires being on the local network. Additionally, an exploit exists. It is suggested to upgrade the affected component.
vuldb.com

Top 10 Best Cloud Penetration Testing Companies in 2025

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
9 months 2 weeks ago

Cloud is the foundation of modern business, but it comes with a complex and evolving security landscape. Traditional penetration testing, which focuses on on-premise networks and applications, is not sufficient to secure these dynamic environments. Cloud penetration testing requires specialized expertise to identify and exploit vulnerabilities unique to cloud-native architectures, including misconfigurations, insecure identity and […]

The post Top 10 Best Cloud Penetration Testing Companies in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Varshini

CVE-2025-48544

CVE Trends
9 months 2 weeks ago
Currently trending CVE - Hype Score: 16 - In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-53804 | Microsoft Windows up to Server 2025 Kernel-Mode Driver information disclosure

Vuldb Updates
9 months 2 weeks ago
A vulnerability, which was classified as problematic, has been found in Microsoft Windows. Affected by this issue is some unknown functionality of the component Kernel-Mode Driver. Performing manipulation results in information disclosure. This vulnerability is reported as CVE-2025-53804. The attack requires a local approach. No exploit exists. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-53805 | Microsoft Windows up to Server 2025 HTTP.sys out-of-bounds

Vuldb Updates
9 months 2 weeks ago
A vulnerability, which was classified as critical, was found in Microsoft Windows up to Server 2025. This affects an unknown part in the library HTTP.sys. Executing manipulation can lead to out-of-bounds read. This vulnerability appears as CVE-2025-53805. The attack may be performed from remote. There is no available exploit. Applying a patch is advised to resolve this issue.
vuldb.com

CVE-2025-53806 | Microsoft Windows Server 2008 R2 SP1 up to Server 2022 23H2 RRAS buffer over-read (Nessus ID 261817)

Vuldb Updates
9 months 2 weeks ago
A vulnerability has been found in Microsoft Windows and classified as problematic. This vulnerability affects unknown code of the component RRAS. The manipulation leads to buffer over-read. This vulnerability is traded as CVE-2025-53806. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to install a patch to address this issue.
vuldb.com

CVE-2025-53808 | Microsoft Windows up to Server 2025 Defender Firewall Service type confusion

Vuldb Updates
9 months 2 weeks ago
A vulnerability was found in Microsoft Windows. It has been classified as critical. Impacted is an unknown function of the component Defender Firewall Service. This manipulation causes type confusion. This vulnerability is handled as CVE-2025-53808. It is possible to launch the attack on the local host. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

CVE-2025-53809 | Microsoft Windows 11 24H2/Server 2025 Local Security Authority Subsystem Service denial of service

Vuldb Updates
9 months 2 weeks ago
A vulnerability was found in Microsoft Windows 11 24H2/Server 2025. It has been declared as critical. The affected element is an unknown function of the component Local Security Authority Subsystem Service. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2025-53809. The attack can be launched remotely. No exploit exists. It is advisable to implement a patch to correct this issue.
vuldb.com

CVE-2025-52194 | Libsndfile 1.2.2 IRCAM Audio File src/ircam.c ircam_read_header memory corruption (Nessus ID 260191 / WID-SEC-2025-1890)

Vuldb Updates
9 months 2 weeks ago
A vulnerability labeled as critical has been found in Libsndfile 1.2.2. The impacted element is the function ircam_read_header of the file src/ircam.c of the component IRCAM Audio File Handler. Executing manipulation can lead to memory corruption. This vulnerability is tracked as CVE-2025-52194. The attack is only possible within the local network. No exploit exists.
vuldb.com

CVE-2025-9264 | Xuxueli xxl-job up to 3.1.1 Jobs JobInfoController.java remove ID resource injection (Issue 3773)

Vuldb Updates
9 months 2 weeks ago
A vulnerability identified as problematic has been detected in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/job/admin/controller/JobInfoController.java of the component Jobs Handler. Performing manipulation of the argument ID results in improper control of resource identifiers. This vulnerability is known as CVE-2025-9264. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
vuldb.com

CVE-2025-9016 | Mechrevo Control Center GX V2 5.56.51.48 Powershell Script Command uncontrolled search path (EUVD-2025-24994)

Vuldb Updates
9 months 2 weeks ago
A vulnerability described as problematic has been identified in Mechrevo Control Center GX V2 5.56.51.48. Affected is an unknown function of the file C:\Program Files\OEM\机械革命控制中心\AiStoneService\MyControlCenter\Command of the component Powershell Script Handler. Such manipulation leads to uncontrolled search path. This vulnerability is documented as CVE-2025-9016. The attack needs to be performed locally. Additionally, an exploit exists.
vuldb.com

CVE-2025-9000 | Mechrevo Control Center GX V2 5.56.51.48 reg File uncontrolled search path (EUVD-2025-24966)

Vuldb Updates
9 months 2 weeks ago
A vulnerability, which was classified as problematic, was found in Mechrevo Control Center GX V2 5.56.51.48. Impacted is an unknown function of the component reg File Handler. The manipulation results in uncontrolled search path. This vulnerability was named CVE-2025-9000. The attack needs to be approached locally. In addition, an exploit is available.
vuldb.com

Managed ad