Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
bolha.us is one of the many independent Mastodon servers you can use to participate in the fediverse.
We're a Brazilian IT Community. We love IT/DevOps/Cloud, but we also love to talk about life, the universe, and more. | Nós somos uma comunidade de TI Brasileira, gostamos de Dev/DevOps/Cloud e mais!

Administered by:

Server stats:

251
active users

bolha.us: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

#vulnerability

19 posts10 participants5 posts today
Public
BeyondMachines :verified:

Google releases April 2025 Android security update fixing 62 flaws Including two actively exploited
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesGoogle releases April 2025 Android security update fixing 62 flaws Including two actively exploitedGoogle has released its April 2025 Android Security Bulletin fixing 62 vulnerabilities, including two actively exploited zero-days. The update also addresses four critical vulnerabilities and 58 high-severity flaws across various components including Framework, System, Kernel, and multiple vendor-specific components, with patches already shared with OEMs since January 2025.
Public
BeyondMachines :verified:

MediaTek fixes critical and high-severity vulnerabilities in multiple chipsets
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesMediaTek fixes critical and high-severity vulnerabilities in multiple chipsetsMediaTek has disclosed and patched multiple critical security vulnerabilities affecting its chipsets used across various devices, with the most severe being CVE-2025-20654 (CVSS 9.8) which allows remote code execution through the WLAN service without user interaction. The vulnerabilities include various out-of-bounds read/write flaws and uncaught exceptions that could lead to remote code execution, privilege escalation, information disclosure, and denial of service across multiple platforms including Android, OpenWrt, Yocto, and RDK-B.
Public
BeyondMachines :verified:

Critical Remote Code Execution flaw reported in Apache Parquet Java library
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesCritical Remote Code Execution flaw reported in Apache Parquet Java libraryA critical remote code execution vulnerability (CVE-2025-30065, CVSS 10) has been discovered in Apache Parquet's Java library affecting all versions up to 1.15.0, allowing attackers to execute arbitrary code through deserialization of untrusted data when processing specially crafted Parquet files, potentially impacting major data processing frameworks, cloud services, and companies like Netflix and Uber until patched in version 1.15.1.
Public
BeyondMachines :verified:

Multiple flaws reported in Hitachi Energy MicroSCADA Pro/X SYS600, at least one critical
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesMultiple flaws reported in Hitachi Energy MicroSCADA Pro/X SYS600, at least one criticalCISA has issued an advisory for multiple security vulnerabilities in Hitachi Energy's MicroSCADA Pro/X SYS600 products, with the most severe being a critical SQL injection flaw (CVE-2024-4872, CVSS 9.9) that allows authenticated attackers to inject code into persistent data, while other vulnerabilities enable path traversal, authentication bypass, session hijacking, and phishing attacks that collectively could compromise operational technology systems if exploited.
Public
BeyondMachines :verified:

ImageRunner: critical privilege escalation vulnerability in Google Cloud Platform
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesImageRunner: critical privilege escalation vulnerability in Google Cloud PlatformThe critical "ImageRunner" vulnerability in Google Cloud Platform allowed attackers with Cloud Run edit permissions to access private container images by exploiting how the Cloud Run service agent pulls images, enabling them to bypass normal registry access requirements and potentially extract secrets or sensitive data from private containers until Google fixed it on January 28, 2025, by implementing validation checks requiring explicit image access permissions.
Public
BeyondMachines :verified:

Critical security vulnerability in Verizon Call Filter App for iOS
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesCritical security vulnerability in Verizon Call Filter App for iOSA security vulnerability in Verizon's Call Filter app for iOS allowed unauthorized access to any customer's call logs by exploiting inadequate validation in the /clr/callLogRetrieval endpoint, where attackers could simply modify the X-Ceq-MDN request header to retrieve call history for any Verizon number, posing serious privacy risks especially for high-risk individuals like journalists and domestic abuse survivors.
Public
BeyondMachines :verified:

IBM App Connect Enterprise fixes critically vulnerable third party module
#cybersecurity #infosec #advisory #vulnerability
beyondmachines.net/event_detai

BeyondMachinesIBM App Connect Enterprise fixes critically vulnerable third party moduleIBM has patched two security vulnerabilities in App Connect Enterprise: a critical remote code execution flaw (CVE-2025-1302, CVSS 9.8) in the jsonpath-plus package that resulted from an incomplete fix of a previous vulnerability, and a medium-severity permissions issue (CVE-2025-24791, CVSS 4.4) in the snowflake-connector-nodejs package. The vulnerabilities affect App Connect Enterprise versions 12.0.1.0-12.0.12.11 and 13.0.1.0-13.0.2.2, with fixes available in versions 12.0.12.12 and 13.0.3.0 respectively.
ExploreLive feeds
About