NVD disclosure day
CVE-2025-66039
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical authentication bypass vulnerability exists in FreePBX Endpoint Manager, allowing unauthenticated attackers to gain unauthorized access by sending an arbitrary value in the Authorization header when webserver authentication is enabled. This could lead to unauthorized control of telephony endpoints. Organizati
CVE-2025-67489
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in a Vite plugin that supports React Server Components, potentially allowing remote code execution on development servers through unsafe dynamic imports. Attackers with network access could read or modify files, exfiltrate sensitive data, or pivot to other internal services, especially i
CVE-2025-66456
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A prototype pollution vulnerability exists in the Elysia Typescript framework's `mergeDeep` function, which could allow an attacker to execute arbitrary code. This issue is relevant to systems using affected versions of Elysia for request validation and server communication. Further investigation is needed to confirm i
CVE-2025-64113
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in Emby Server allows unauthenticated network access to gain full administrative control. This could permit attackers to modify server settings and potentially access user data managed by the server. Users should confirm if Emby Server is in use and exposed, as the issue is fixed in version 4.9
CVE-2025-65882
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in the system upgrade helper of openmptcprouter, potentially allowing unauthenticated attackers to write arbitrary files or execute commands. This impacts network edge devices, raising concerns about system integrity and unauthorized control if the technology is exposed.
CVE-2025-64672
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A cross-site scripting vulnerability in Microsoft SharePoint Server allows an authorized attacker to perform spoofing over a network. This could lead to impersonation and compromise service integrity. It is important to identify SharePoint Server instances and assess their exposure.
CVE-2025-62221
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in the Windows Cloud Files Mini Filter Driver allows local attackers to elevate privileges. This could impact system integrity and data security for organizations. The vulnerability is actively exploited, posing a realistic business risk.
CVE-2025-59719
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb may allow an unauthenticated attacker to bypass FortiCloud SSO authentication via a crafted SAML response, potentially enabling unauthorized access to protected applications.
CVE-2025-59718
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A vulnerability in Fortinet products allows unauthorized access by bypassing SSO authentication. This impacts affected organizations by potentially exposing systems and data, creating business risk. Organizations should identify affected assets and apply vendor fixes.
CVE-2025-34414
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
Entrust Instant Financial Issuance On Premise software has an insecure .NET Remoting service enabled by default. A remote, unauthenticated attacker can exploit this to read arbitrary files, coerce authentication, and potentially achieve file writes and remote code execution, leading to sensitive data disclosure and hos
CVE-2025-63742
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL injection vulnerability in a web application's login function could allow attackers to access sensitive information, including administrator accounts and database details, by manipulating login parameters. This could lead to unauthorized exposure of critical business and customer data.
CVE-2025-67504
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability exists in WBCE CMS where a non-cryptographically secure method is used for password generation, potentially allowing attackers to predict or brute-force passwords. This could lead to unauthorized access to user accounts if the vulnerability is reachable.
CVE-2025-66568
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
The ruby-saml library is vulnerable to authentication bypass due to a flaw in how it processes invalid XML input during canonicalization. This could allow an unauthenticated attacker to bypass authentication mechanisms, leading to unauthorized access.
CVE-2025-66567
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical authentication bypass vulnerability exists in the ruby-saml library due to an incomplete fix for a previous issue. Attackers can exploit this flaw, which involves a Signature Wrapping attack on XML parsing, to bypass authentication and gain unauthorized access to services. This could impact systems relying o
CVE-2025-66565
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Fiber Utils allows predictable UUIDs when the random number generator fails, potentially compromising security-critical operations in applications using the library. This issue could impact applications that rely on the utility for security functions if the crypto/rand fails. The vulnerability is fix
CVE-2025-42928
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A deserialization vulnerability in SAP jConnect could permit a highly privileged user to execute remote code, impacting confidentiality, integrity, and availability. The issue is relevant if specially crafted input is used, and it requires high privileges to exploit.
CVE-2025-42880
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
SAP Solution Manager has a critical vulnerability allowing authenticated users to inject malicious code through function modules, potentially granting attackers full system control and impacting confidentiality, integrity, and availability.
CVE-2025-40938
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in SIMATIC CN 4100 devices allows unauthorized access to sensitive firmware information, potentially impacting device confidentiality, integrity, and availability. This could lead to data misuse and compromise operational systems.
CVE-2025-40801
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability exists in the SALT SDK's handling of TLS connections, preventing proper server certificate validation. This could enable man-in-the-middle attacks, potentially exposing or altering communications with authorization servers. Its relevance depends on the specific deployment and network exposure of the aff
CVE-2025-40800
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A vulnerability in several engineering and design software products allows for man-in-the-middle attacks due to missing server certificate validation during TLS connections. This could enable an attacker to intercept communications, impacting data integrity and the authorization process if the affected products are rea
CVE-2025-40343
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability exists in the Linux kernel's nvmet-fc subsystem, allowing a double-free condition during forceful port shutdowns. This could lead to system instability or crashes by improperly deleting data associations. The reachability and scope of affected systems need to be confirmed.
CVE-2025-14330
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in the JavaScript engine of Firefox and Thunderbird, enabling arbitrary code execution if a user interacts with malicious content. This could impact system data and service integrity.
CVE-2025-14326
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the Audio/Video: GMP component of Mozilla products, potentially allowing remote attackers to compromise systems by processing malicious media content. This critical flaw could affect application integrity and availability. The uncertainty lies in whether this component is reacha
CVE-2025-14324
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A critical vulnerability exists in the JavaScript engine of Mozilla Firefox and Thunderbird, stemming from a JIT miscompilation flaw. If reached, this could allow for severe system compromise, impacting data integrity and availability. Readers should care because it affects client-side applications and could be exploit
CVE-2025-14321
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the WebRTC: Signaling component of Firefox and Thunderbird. This flaw could potentially allow for the execution of arbitrary code if reached, though its relevance is primarily tied to user interaction with malicious content on client-side applications.
CVE-2025-14310
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A buffer overflow vulnerability exists in RethinkDB, a database technology. If reachable, an attacker could exploit this by sending malformed input, potentially leading to code execution or denial-of-service, impacting database integrity and availability. It is important to confirm if RethinkDB is in use within the env
CVE-2025-14308
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
An integer overflow vulnerability exists in the Robocode software's Buffer class write method. This flaw could allow an attacker to execute arbitrary code by submitting specially crafted inputs that manipulate data length. It is uncertain if this technology is in use or if it is exposed to external inputs.
CVE-2025-14306
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A directory traversal vulnerability in Robocode's CacheCleaner allows for arbitrary file deletion by manipulating file paths. While this could impact system integrity, Robocode is typically a client-side desktop application, making its reachability uncertain.
CVE-2025-12504
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical SQL Injection vulnerability in Talent Software UNIS allows attackers to inject malicious commands into databases, potentially leading to unauthorized access or manipulation of sensitive information. This issue is reachable over a network. Confirming if UNIS is deployed is crucial.
CVE-2025-11022
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A Cross-Site Request Forgery vulnerability in Personal Project Panilux could allow attackers to inject commands if users interact with malicious content. The vendor has disclaimed ownership, leaving a clear path for remediation uncertain. The primary concern is to determine if this project is in use and potentially exp
CVE-2022-50666
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A use-after-free vulnerability exists in the Linux kernel's RDMA subsystem that could lead to system instability or code execution if triggered by a specific network event. This issue arises from improper handling of connection drops, potentially allowing an attacker to reference deallocated memory. Systems using RDMA,
CVE-2025-66481
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
An unpatched vulnerability in the DeepChat AI platform allows cross-site scripting and potential remote code execution via improperly sanitized content. This issue can be exploited remotely and bypasses existing security filters, posing a risk to user systems.
CVE-2023-53794
Halo Surface Signal: 2 out of 5 — less likely to be public-facing.
A critical vulnerability exists in the Linux kernel's file sharing (CIFS) component related to session reconnection. This flaw could allow an attacker with network access to trigger a use-after-free condition, potentially leading to system compromise. Readers should confirm if their environment uses this technology and
CVE-2025-65964
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The n8n workflow automation platform has a critical vulnerability that allows for remote code execution. Attackers with the ability to modify workflows can exploit this by manipulating Git configurations to run malicious commands on the n8n host. This could lead to a compromise of the system.