AI gives ransomware gangs a deadly upgrade

AI gives ransomware gangs a deadly upgrade Ransomware continues to be the major threat to large and medium-sized businesses, with numerous ransomware gangs abusing AI for automation, according to Acronis. Ransomware gangs maintain pressure on … Read more Published Date: Aug 22, 2025 (3 hours, 43 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2024-55956 CVE-2024-50623 […]

Google Password Manager Arrives as a Standalone App on Android

Google Password Manager Arrives as a Standalone App on Android Google’s built-in Password Manager for Android already offers a comprehensive suite of features, including support for TOTP verification codes and passkeys. Now, the company has released it as a stand … Read more Published Date: Aug 22, 2025 (11 hours, 58 minutes ago) Vulnerabilities has been mentioned […]

CVE-2025-41452 – Danfoss AK-SM8xxA Series Web Interface Configuration Setting Vulnerability

The following table lists the changes that have been made to the CVE-2025-41452 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by d7ff35af-cf88-454c-bab9-af60602f10f8 Aug. 22, 2025 Action […]

CVE-2025-41451 – Danfoss AK-SM8xxA Series Command Injection

The following table lists the changes that have been made to the CVE-2025-41451 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by d7ff35af-cf88-454c-bab9-af60602f10f8 Aug. 22, 2025 Action […]

CVE-2025-43300 affects Apple Products

CVE-2025-43300 affects Apple Products August 22, 2025Vulnerability SummaryCVE-2025-43300 is a zero-day out-of-bounds write vulnerability in the ImageIO framework used by Apple devices. ImageIO is responsible for decoding and processing mu … Read more Published Date: Aug 22, 2025 (2 hours, 50 minutes ago) Vulnerabilities has been mentioned in this article. CVE-2025-43300 CVE-2018-0171

CVE-2025-43752 – Liferay Portal File Upload Denial of Service (DoS) Vulnerability

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allow users to upload an unlimited amount of files through the object entries attachment fields, the files are stored in the document_library allowing an attacker to […]

CVE-2025-34158 (CVSS 10): Plex Media Server Users Warned to Patch Critical Vulnerability Now

CVE-2025-34158 (CVSS 10): Plex Media Server Users Warned to Patch Critical Vulnerability Now Plex Media Server (PMS) users are being urged to update their systems immediately after the discovery of a critical security vulnerability, now tracked as CVE-2025-34158, which has been assigned the m … Read more Published Date: Aug 22, 2025 (15 hours, 2 minutes ago) […]

CVE-2025-55746: Critical Directus Flaw Exposes Servers to Unauthenticated File Upload and RCE

CVE-2025-55746: Critical Directus Flaw Exposes Servers to Unauthenticated File Upload and RCE The Directus project has disclosed a critical vulnerability tracked as CVE-2025-55746 (CVSS 9.3) that could allow unauthenticated attackers to upload or modify files on vulnerable servers. Directus, a … Read more Published Date: Aug 22, 2025 (15 hours, 35 minutes ago) Vulnerabilities has been mentioned […]

CVE-2025-43753 – Liferay Portal Liferay DXP Reflected Cross-Site Scripting (XSS)

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.16 and 7.4 update 32 through update 92 allows an remote authenticated user to inject JavaScript into the embedded message field from the form container.

CVE-2023-4131 – CVE-2022-1234: OpenSSL SSL/TLS Denial of Service

Community reconstruction of the legacy JSON NVD Data Feeds. This project uses and redistributes data from the NVD API but is neither endorsed nor certified by the NVD. Shell Updated: 41 minutes ago 173 stars 24 fork 24 watcher Born at : May 17, 2023, 8 a.m. This repo has been linked 17 different CVEs too.