Microsoft Windows TAR File Parsing NTLM Relay Vulnerability (CVE-2025-59284)
– This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows.
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Multiple Cisco Products Snort 3 MIME Denial of Service Vulnerabilities (CVE-2025-20359 and CVE-2025-20360)
– Multiple Cisco products are affected by vulnerabilities in the HTTP Multipurpose Internet Mail Extensions (MIME) Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak possible sensitive information or to restart.
Read MoreCisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability (CVE-2025-20329)
– A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. To exploit this vulnerability, the attacker must have valid administrative credentials.
Read More
Palo Alto Improper Neutralization of Input in the Management Web Interface (CVE-2025-4615)
– An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands.
Read More
Jaspersoft Jasper Reports JRLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVE-2025-10492)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Jaspersoft Jasper Reports.
Read More7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability (CVE-2025-11001)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip.
Read More
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability (CVE-2025-11002)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip.
Read More
Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability (CVE-2025-11466)
– This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra.
Read MoreActive exploitation of vulnerability affecting Oracle E-Business Suite (CVE-2025-61882)
– Oracle has published a security update to address an unauthenticated remote vulnerability (CVE-2025-61882) affecting Oracle E-Business Suite (EBS).
Read Morewin-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability (CVE-2025-11202)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server.
Read More