Aggregator

A vulnerability categorized as problematic has been discovered in Fortinet FortiAnalyzer up to 6.4.15/7.0.14/7.2.11/7.4.6/7.6.3. Affected is an unknown function of the component OFTP Request Handler. Executing manipulation can lead to information disclosure. The identification of this vulnerability is CVE-2025-53845. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

Hackers can exploit vulnerabilities in signed UEFI shells to bypass Secure Boot protections on over 200,000 Framework laptops and desktops. According to Eclypsium, these vulnerabilities expose fundamental flaws in how modern systems trust boot components, potentially enabling persistent malware infections that evade detection. Disclosed recently to Framework, the issues stem from legitimate diagnostic tools that, […]

The post UEFI Shell Vulnerabilities Could Allow Hackers to Bypass Secure Boot on 200,000+ Laptops appeared first on Cyber Security News.

A vulnerability was found in Fortinet FortiOS up to 6.4.16/7.0.16/7.2.10/7.4.6/7.6.2. It has been rated as problematic. This impacts an unknown function of the component SSL VPN. Performing manipulation results in session expiration. This vulnerability was named CVE-2025-25252. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in Fortinet FortiIsolator up to 2.3.4/2.4.4. It has been declared as problematic. This affects an unknown function of the component Cookie Handler. Such manipulation leads to session expiration. This vulnerability is uniquely identified as CVE-2024-33507. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in Fortinet FortiPAM and FortiSwitchManager. It has been classified as critical. The impacted element is an unknown function of the component HTTP Request Handler. This manipulation causes weak authentication. This vulnerability is handled as CVE-2025-49201. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Fortinet FortiPAM, FortiOS and FortiProxy 1.4.1 and classified as critical. The affected element is an unknown function. The manipulation results in certificate with host mismatch. This vulnerability is known as CVE-2025-25253. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in Fortinet FortiAnalyzer up to 7.0.13/7.2.10/7.4.6/7.6.2 and classified as problematic. Impacted is an unknown function of the component FortiCloud SSO. The manipulation leads to race condition. This vulnerability is traded as CVE-2025-54973. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in Fortinet FortiOS up to 6.4.16/7.0.17/7.2.12/7.4.8/7.6.3. This issue affects some unknown processing of the component HTTP Daemon. Executing manipulation can lead to unchecked return value. This vulnerability appears as CVE-2025-58903. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Fortinet FortiProxy and FortiOS. This vulnerability affects unknown code of the component HTTP Request Handler. Performing manipulation results in improper authorization. This vulnerability is reported as CVE-2025-54822. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Fortinet FortiOS and FortiProxy. This affects an unknown part of the component CLI. Such manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2023-46718. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Fortinet FortiSRA, FortiSwitchManager, FortiProxy, FortiOS and FortiPAM. Affected by this issue is some unknown functionality of the component HTTP Request Handler. This manipulation causes heap-based buffer overflow. This vulnerability is registered as CVE-2025-22258. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Fortinet FortiOS, FortiProxy, FortiManager and FortiAnalyzer. Affected by this vulnerability is an unknown functionality. The manipulation results in heap-based buffer overflow. This vulnerability is cataloged as CVE-2024-50571. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Fortinet FortiVoice, FortiManager, FortiRecorder, FortiOS, FortiNDR, FortiPAM, FortiTester, FortiMail, FortiWeb and FortiProxy. Affected is an unknown function. The manipulation leads to insertion of sensitive information into sent data. This vulnerability is listed as CVE-2024-47569. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

Аномалия растёт, полюса смещаются, спутники Swarm обновляют модели.

Questing Quokka стала полигоном для радикальных экспериментов Canonical.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

For Cybereason, the acquisition bookends a turbulent seven-year period that saw the company swing from near-IPO status to dramatic valuation declines and multiple restructurings.

The post LevelBlue to acquire Cybereason in latest cybersecurity industry consolidation appeared first on CyberScoop.

California's governor signed a bill that requires chatbot operators to set up a system to prevent suicidal ideation — an issue that several federal lawmakers have also focused on in recent months.