Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability

Jason Davies 1045 Views 0 Comments ,  ,  ,  0 min read

– A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.

Read More
NewsSecurity Vulnerabilities

Multiple Cisco products affected by Remote Code Execution Vulnerability (CVE-2025-20363)

Luke Simmonds 1072 Views 0 Comments ,  ,  ,  1 min read

– This vulnerability is due to improper validation of user-supplied input in HTTP requests.

Read More
NewsSecurity Vulnerabilities

Apple macOS OGG Audio File Header Parsing Memory Corruption Remote Code Execution Vulnerability (CVE-2025-43346)

Jason Davies 1278 Views 0 Comments ,  ,  ,  ,  0 min read

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS.

Read More
NewsSecurity Vulnerabilities

Apple Safari IPC Connection Invalidation Use-After-Free Information Disclosure Vulnerability (CVE-2025-43368)

Luke Simmonds 1020 Views 0 Comments ,  ,  ,  ,  0 min read

CVE number = CVE-2025-43368 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User

Read More
NewsSecurity Vulnerabilities

Digilent WaveForms DWF3WORK File Parsing Directory Traversal Remote Code Execution Vulnerability (CVE-2025-10203)

Luke Simmonds 1088 Views 0 Comments ,  ,  ,  0 min read

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent WaveForms.

Read More
NewsSecurity Vulnerabilities

Palo Alto User-ID Credential Agent: Cleartext Exposure of Service Account password (CVE-2025-4235)

Jason Davies 1189 Views 0 Comments ,  ,  1 min read

– An information exposure vulnerability in the Palo Alto Networks User-ID Credential Agent (Windows-based) can expose the service account password under specific non-default configurations.

Read More
NewsSecurity Vulnerabilities

Microsoft .NET IsTypeAuthorized Deserialization of Untrusted Data Denial-of-Service Vulnerability

Jason Davies 1176 Views 0 Comments ,  ,  ,  0 min read

– This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft .NET.

Read More
NewsSecurity Vulnerabilities

Siemens Simcenter Femap STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-40762)

Jason Davies 1203 Views 0 Comments ,  ,  ,  0 min read

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap.

Read More
NewsSecurity Vulnerabilities

Cisco IOS XR Software Image Verification Bypass Vulnerability (CVE-2025-20248)

Jason Davies 1144 Views 0 Comments ,  ,  ,  ,  1 min read

CVE number = CVE-2025-20248 A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local

Read More
NewsSecurity Vulnerabilities

Cisco Unified Communications Manager Cross-Site Request Forgery Vulnerability (CVE-2025-20326)

Jason Davies 1103 Views 0 Comments ,  ,  ,  ,  0 min read

– A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management Edition (SME) Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected device.

Read More