A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.
An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
Security Fix(es):
* git: Git arbitrary code execution (CVE-2025-48384)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
SysAid On-Prem has a critical XML External Entity (XXE) vulnerability in its Checkin processing functionality. This flaw allows an attacker to perform administrator account takeover and read arbitrary files. The vulnerability is actively exploited in the wild. No specific affected versions or patch information is provided.
CVE-2025-2776 is a critical vulnerability in SysAid On-Prem involving improper restriction of XML external entity (XXE) references in the Server URL processing functionality. This flaw allows unauthenticated attackers to perform administrator account takeover and read arbitrary files on the affected system. The vulnerability has a high CVSS score of 9.3 and is known to be exploited in the wild. No specific affected versions or patch information is provided in the available data.
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network.
Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild.
Microsoft is preparing and fully testing a comprehensive update to address this vulnerability. In the meantime, please make sure that the mitigation provided in this CVE documentation is in place so that you are protected from exploitation.
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that launches the node-gyp.dll malware on Windows.
Malware campaigns exploiting vulnerabilities in Ivanti Connect Secure devices, specifically CVE-2025-0282, have been active from December 2024 through July 2025. Attackers use MDifyLoader to side-load Cobalt Strike Beacon DLLs, along with vshell RAT and Fscan network scanner, to maintain persistent access. Initial access is gained via brute-force attacks, direct exploitation, and stolen credentials. The threat actors employ advanced lateral movement, persistence mechanisms such as domain account creation and malware service/task registration, and evasion techniques including use of legitimate files and ETW bypasses. European organizations using Ivanti Connect Secure devices are particularly targeted. The threat is assessed as medium severity due to moderate impact and exploitation complexity. No public exploits are currently available.
Fortinet FortiWeb contains a critical SQL injection vulnerability (CVE-2025-25257) that allows unauthenticated attackers to execute arbitrary SQL commands via crafted HTTP or HTTPS requests. This vulnerability has a high CVSS score of 9.6 and is known to be exploited in the wild. No specific affected versions or patch information is provided.
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2025-47812 is a critical vulnerability in Wing FTP Server involving improper neutralization of null byte or NUL characters. This flaw allows injection of arbitrary Lua code into user session files, enabling execution of system commands with the FTP service's privileges, which are typically root or SYSTEM. The vulnerability has a CVSS score of 10, indicating maximum severity, and is known to be exploited in the wild.
CVE-2025-47813 is a medium severity vulnerability in Wing FTP Server versions before 7.4.4 where the loginok.html page discloses the full local installation path when a long UID cookie value is used. This information disclosure stems from improper error message handling (CWE-209), potentially aiding attackers in reconnaissance. The vulnerability requires network access and low privileges but no user interaction. Exploitation does not impact integrity or availability but leaks sensitive path information that could facilitate further attacks. No known exploits are reported in the wild yet. Organizations using affected Wing FTP Server versions should prioritize patching or mitigating this issue. Countries with significant Wing FTP Server deployments and critical infrastructure relying on FTP services are at higher risk.
