JumpServer fixes critical security flaw in v3.10.20-lts and v4.10.11-lts

⚠️ CVE-2023-7305: CRITICAL SmartBI versions 8, 9, and 10 had a critical file upload flaw allowing attackers to perform dangerous operations. The vendor issued a patch in July 2023. Notably, Rondo botnet has exploited this vulnerability, according to VulnCheck. Source : https://lnkd.in/efGFB52h #CVE20237305 #CVE #CyberSecurity #Vulnerability #CVEFind #CVEFindAlert

⚠️ CVE-2025-12618: HIGH A vulnerability has been found in Tenda AC8 16.03.34.06. This impacts an unknown function of the file /goform/DatabaseIniSet. The manipulation of the argument Time leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Source : https://lnkd.in/eYHy73Rc #CVE202512618 #CVE #CyberSecurity #Vulnerability #CVEFind #CVEFindAlert

🚨 High risk vulnerability in Sauter's wsc server! CVE-2025-41722 points to a critical flaw where hard-coded authentication credentials are used, leading to potential cryptographic failures. This issue is a stark reminder of the importance of API security. An attacker could exploit this flaw to extract private keys, posing a serious threat. Stay safe! #Sauter #APIsecurity #OWASP #CVE202541722 #CyberSecurity https://lnkd.in/ebd4YA8z

⚠️ CVE-2025-46784: CRITICAL Denial of service vulnerability found in Entr'ouvert Lasso 2.5.1 due to lasso_node_init_from_message_with_format flaw. Crafted SAML response causes memory depletion, leading to denial of service. Attackers can exploit by sending a malicious SAML response. Source : https://lnkd.in/epJRk7Ji #CVE202546784 #CVE #CyberSecurity #Vulnerability #CVEFind #CVEFindAlert

⚠️ CVE-2025-61929: CRITICAL Cherry Studio lacks security measures for `cherrystudio://` protocol, allowing attackers to execute malicious commands via crafted URLs. Users must avoid clicking on unknown links to prevent compromise. Patch for this vulnerability is unavailable. Source : https://lnkd.in/eV3ygkmX #CVE202561929 #CVE #CyberSecurity #Vulnerability #CVEFind #CVEFindAlert

ICYMI: 🚨 New High Impact CVE Detected! 🚨 CVE-2025-10240 affects Progress Software / Flowmon Details: A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions ... 🔗 https://lnkd.in/dSGqke9e 🔍 Could this affect your systems? 🎯 We map threats to your infrastructure and help you respond smart and fast. 📩 Let's talk: https://openthreat.ro #CVE #CyberSecurity #SMBSecurity #VulnerabilityManagement #OpenThreatRO

⚠️ CVE-2025-10352: CRITICAL Vulnerability in the melis-core module of Melis Technology's Melis Platform, which, if exploited, allows an unauthenticated attacker to create an administrator account via a request to '/melis/MelisCore/ToolUser/addNewUser'. Source : https://lnkd.in/eEQRWrEU #CVE202510352 #CVE #CyberSecurity #Vulnerability #CVEFind #CVEFindAlert

⚠️ CVE-2025-41699: HIGH An low privileged remote attacker with an account for the Web-based management can change the system configuration to perform a command injection as root, resulting in a total loss of confidentiality, availability and integrity due to improper control of generation of code ('Code Injection'). Source : https://lnkd.in/ejvkuNYm #CVE202541699 #CVE #CyberSecurity #Vulnerability #CVEFind #CVEFindAlert

F5 has released urgent security updates for its BIG-IP products, addressing critical vulnerabilities that were reportedly stolen in a breach detected on August 9, 2025. All organizations utilizing BIG-IP solutions are strongly advised to apply these patches immediately to mitigate potential exploitation risks. Proactive patching is essential to safeguard against known threats. #CyberSecurity #Vulnerability #DataBreach https://lnkd.in/g8AGBaaU

F5 has released urgent security updates for its BIG-IP products, addressing critical vulnerabilities that were reportedly stolen in a breach detected on August 9, 2025. All organizations utilizing BIG-IP solutions are strongly advised to apply these patches immediately to mitigate potential exploitation risks. Proactive patching is essential to safeguard against known threats. #CyberSecurity #Vulnerability #DataBreach https://lnkd.in/g8AGBaaU