Overview
- Pexip
- Infinity
25 Dec 2025
Published
25 Dec 2025
Updated
CVSS v3.1
HIGH (7.5)
EPSS
Pending
KEV
Description
Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access to execute code on one node within a Pexip Infinity installation) to impact the operation of other nodes within the installation.
Statistics
- 1 Post
Last activity: Last hour
Fediverse
🟠CVE-2025-66377 - High (7.5)
Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker (who already has access to execute code on one node within a Pexip Infinity installation) to impact the operation of othe...
🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-66377/
#CVE #vulnerability #infosec #cybersecurity #security #Tenda
Overview
Description
7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue.
Statistics
- 1 Post
Last activity: 6 hours ago
Overview
- Roundcube
- Webmail
18 Dec 2025
Published
18 Dec 2025
Updated
CVSS v3.1
HIGH (7.2)
EPSS
0.06%
KEV
Description
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.
Statistics
- 2 Posts
Last activity: 5 hours ago
Bluesky
URGENT: #Fedora 43 Roundcube Webmail security patch is live. Patches CVE-2025-68461 (XSS via SVG) & CVE-2025-68460 (Info Disclosure). Remote exploitation risk is high.
Read more: 👉 tinyurl.com/3xkhyk9h #Security
Overview
Description
7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.
Statistics
- 1 Post
Last activity: 6 hours ago
Overview
- Roundcube
- Webmail
18 Dec 2025
Published
18 Dec 2025
Updated
CVSS v3.1
HIGH (7.2)
EPSS
0.05%
KEV
Description
Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer.
Statistics
- 2 Posts
Last activity: 5 hours ago
Bluesky
URGENT: #Fedora 43 Roundcube Webmail security patch is live. Patches CVE-2025-68461 (XSS via SVG) & CVE-2025-68460 (Info Disclosure). Remote exploitation risk is high.
Read more: 👉 tinyurl.com/3xkhyk9h #Security