Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability (CVE-2025-2773)

Jason Davies 457 Views 0 Comments ,  ,  0 min read

CVE number – CVE-2025-2773 This vulnerability allows remote attackers to execute arbitrary code on affected installations of BEC Technologies Multiple Routers.

Read More
NewsSecurity Vulnerabilities

70mai A510 Use of Default Password Authentication Bypass Vulnerability (CVE-2025-2766)

Luke Simmonds 455 Views 0 Comments ,  ,  ,  0 min read

CVE number = CVE-2025-2766 – This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of 70mai A510.

Read More
NewsSecurity Vulnerabilities

OpenSlides Improper Neutralization of Input During Web Page Generation (CVE-2025-30345)

Jason Davies 386 Views 0 Comments ,  ,  0 min read

CVE number – CVE-2025-30345 An issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chat_group.create action,

Read More
NewsSecurity Vulnerabilities

Apple macOS MOV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-24124)

Jason Davies 403 Views 0 Comments ,  ,  ,  ,  0 min read

CVE-2025-24124 – This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS.

Read More
NewsSecurity Vulnerabilities

IROAD Dash Cam X5 critical vulnerability (CVE-2025-2345)

Jason Davies 359 Views 0 Comments ,  ,  0 min read

CVE-2025-2345 – The IROAD X5 dashcam allows unauthorized users to modify critical system settings once connected to its network.

Read More
NewsSecurity Vulnerabilities

Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerability (CVE-2025-20141)

Jason Davies 485 Views 0 Comments ,  ,  ,  1 min read

A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7.9.2 could allow an unauthenticated, adjacent attacker to cause control plane traffic to stop working on multiple Cisco IOS XR platforms.

Read More
NewsSecurity Vulnerabilities

NVIDIA Riva Triton Inference Server Missing Authentication Vulnerability (CVE-2025-23242)

Luke Simmonds 390 Views 0 Comments ,  0 min read

CVE-2025-23242 – This vulnerability allows remote attackers to access protected functionality on affected installations of NVIDIA Riva.

Read More
NewsSecurity Vulnerabilities

Remote code execution when loading a crafted GraphQL schema (CVE-2025-27407)

Jason Davies 411 Views 0 Comments ,  ,  0 min read

Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution.

Read More
NewsSecurity Vulnerabilities

Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability (CVE-2025-20209)

Jason Davies 562 Views 0 Comments ,  ,  ,  1 min read

CVE-2025-20209 – A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets.

Read More
NewsSecurity Vulnerabilities

Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability (CVE-2025-2233)

Jason Davies 505 Views 0 Comments ,  ,  ,  ,  0 min read

CVE-2025-2233 allows attackers to bypass authentication on Samsung SmartThings due to improper signature verification.

Read More