Aggregator

CVE-2025-41243 | VMware Spring Cloud Gateway Server Webflux up to 3.1.10/4.1.10/4.2.4/4.3.0 Actuator Endpoint expression language injection

VulDB Recent Entries
9 months 1 week ago
A vulnerability, which was classified as very critical, has been found in VMware Spring Cloud Gateway Server Webflux up to 3.1.10/4.1.10/4.2.4/4.3.0. This issue affects some unknown processing of the component Actuator Endpoint. This manipulation causes improper neutralization of special elements used in an expression language statement. This vulnerability appears as CVE-2025-41243. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

CVE-2009-20005 | InterSystems Caché up to 2009.1 HTTP GET Request UtilConfigHome.csp stack-based overflow (EDB-16807)

VulDB Recent Entries
9 months 1 week ago
A vulnerability classified as critical has been found in InterSystems Caché up to 2009.1. This affects an unknown part of the file UtilConfigHome.csp of the component HTTP GET Request Handler. The manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2009-20005. The attack can be initiated remotely. Additionally, an exploit exists.
vuldb.com

CVE-2025-8893 | Autodesk Revit PDF File Parser out-of-bounds write

VulDB Recent Entries
9 months 1 week ago
A vulnerability labeled as critical has been found in Autodesk Revit, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D, AutoCAD MAP 3D, Civil 3D and Advance Steel. Affected is an unknown function of the component PDF File Parser. Such manipulation leads to out-of-bounds write. This vulnerability is listed as CVE-2025-8893. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.
vuldb.com

CVE-2025-8894 | Autodesk Revit PDF File Parser heap-based overflow

VulDB Recent Entries
9 months 1 week ago
A vulnerability identified as critical has been detected in Autodesk Revit, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D, AutoCAD MAP 3D, Civil 3D and Advance Steel. This impacts an unknown function of the component PDF File Parser. This manipulation causes heap-based buffer overflow. This vulnerability is tracked as CVE-2025-8894. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.
vuldb.com

OpenSSL Conference 2025: Just 21 Days Until It Begins

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
9 months 1 week ago

Newark, New Jersey, United States, September 16th, 2025, CyberNewsWire The OpenSSL Conference 2025 will take place on October 7 – 9 in Prague. The program will bring together lawyers, regulators, developers, and entrepreneurs to discuss security and privacy in a global context. Conference starts in 3 weeks. [REGISTRATION AVAILABLE HERE]  Conference Contact Details The OpenSSL Conference team […]

The post OpenSSL Conference 2025: Just 21 Days Until It Begins appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CyberNewswire

3 Weeks Left Until the Start of the OpenSSL Conference 2025

Cyber Security News
9 months 1 week ago

Newark, New Jersey, United States, September 16th, 2025, CyberNewsWire The OpenSSL Conference 2025 will take place on October 7 – 9 in Prague. The program will bring together lawyers, regulators, developers, and entrepreneurs to discuss security and privacy in a global context. Conference starts in 3 weeks. [REGISTRATION AVAILABLE HERE]  Conference Contact Details The OpenSSL Conference team […]

The post 3 Weeks Left Until the Start of the OpenSSL Conference 2025 appeared first on Cyber Security News.

Cybernewswire

Shai-Hulud: A Persistent Secret Leaking Campaign

Security Boulevard
9 months 1 week ago

On September 15, a new supply chain attack was identified that targeted the @ctrl/tinycolor and 150 other NPM packages. The attack scenario was similar to the one used in the s1ngularity and GhostActions campaigns. The threat actors combined a local environment secrets extraction with a malicious GitHub actions workflow

The post Shai-Hulud: A Persistent Secret Leaking Campaign appeared first on Security Boulevard.

Gaëtan Ferry

Managed ad