NVD disclosure day
CVE-2025-58434
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Flowise allows unauthenticated attackers to reset user passwords and take over accounts by exploiting a flaw in the `forgot-password` endpoint. This affects unpatched versions of Flowise, impacting both cloud and self-hosted deployments that expose this feature, potentially leading to unauthorized ac
CVE-2025-55835
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in SueamCMS allows remote attackers to execute arbitrary code due to unfiltered file uploads. This impacts internet-facing web applications, potentially leading to system compromise. Confirm relevance to SueamCMS to understand exposure.
CVE-2025-9556
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Langchaingo permits server-side template injection when processing prompts with Jinja2 syntax, potentially allowing an attacker to read sensitive system files. This issue is reachable through network access via web applications or APIs that handle external user input. The primary concern is understan
CVE-2025-10365
Halo Surface Signal: 3 out of 5 — possibly public-facing.
The Evertz SDVN 3080ipx-10G, a video switching fabric, has a web management interface vulnerability that allows unauthenticated remote attackers to achieve command execution with root privileges. This could lead to the interruption or modification of media streaming and closed caption generation. It is uncertain if thi
CVE-2025-10364
Halo Surface Signal: 3 out of 5 — possibly public-facing.
The Evertz SDVN 3080ipx-10G, used for high-bandwidth video Ethernet switching, has a web management interface vulnerable to arbitrary command injection. Remote, unauthenticated attackers can gain root privileges, potentially interrupting media streaming or altering content. This vulnerability is relevant due to its pot
CVE-2025-21043
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Samsung Android devices allows remote attackers to execute arbitrary code, posing a significant business risk including data compromise and service disruption.
CVE-2025-21042
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
Samsung Android devices have an out-of-bounds write vulnerability in a library that handles image processing. This flaw can allow remote attackers to execute arbitrary code on affected devices, leading to potential system compromise and data exfiltration. This presents a significant business risk.