CVE-2025-46617 – Quantum StorNext Web GUI API Unauthorized Configuration Access and Modification

April 25, 2025

CVE ID : CVE-2025-46617

Published : April 25, 2025, 7:15 a.m. | 14 minutes ago

Description : Quantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and unauthorized modification of some software configuration parameters via undocumented user credentials. This affects StorNext RYO before 7.2.4, StorNext Xcellis Workflow Director before 7.2.4, and ActiveScale Cold Storage.

Severity: 7.2 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticlePasses is a GUI tool to manage your digital passes

Next Article CVE-2025-46616 – Quantum StorNext Web GUI API RCE

Highlights

CVE-2025-4638 – PCL Zlib Inftrees Pointer Arithmetic Vulnerability

May 14, 2025

CVE ID : CVE-2025-4638

Published : May 14, 2025, 6:15 p.m. | 51 minutes ago

Description : A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary (PCL). This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic.

Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

From Data To Decisions: UX Strategies For Real-Time Dashboards

Honeycomb launches AI observability suite for developers

Low-Code vs No-Code Platforms for Node.js: What CTOs Must Know Before Investing

ServiceNow unveils Zurich AI platform

Building personal apps with open source and AI

What Can We Actually Do With corner-shape?

Craft, Clarity, and Care: The Story and Work of Mengchu Yao

Distribution Release: Q4OS 6.1

Learning from PHP Log to File Example

Learning from PHP Log to File Example

Online EMI Calculator using PHP – Calculate Loan EMI, Interest, and Amortization Schedule

Package efficiency and dependency hygiene

Dmitry — The Deep Magic

Dmitry — The Deep Magic

Right way to record and share our Terminal sessions

Windows 11 Powers Up WSL: How GPU Acceleration & Kernel Upgrades Change the Game

CVE-2025-46617 – Quantum StorNext Web GUI API Unauthorized Configuration Access and Modification

Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories

Student Insider Threats Driving Surge in UK School Data Breaches, ICO Warns

CVE-2025-54443 – Samsung MagicINFO 9 Server Path Traversal Vulnerability

Atomfall’s Wicked Isle DLC is coming sooner than you think and fully embraces folk horror

CVE-2025-22406 – Apache OpenWRT bnep Use After Free Local Privilege Escalation

How to Build a Conversational AI Chatbot with Stream Chat and React

CVE-2025-4638 – PCL Zlib Inftrees Pointer Arithmetic Vulnerability

CVE-2025-27558 – Wi-Fi Protected Access (WPA, WPA2, WPA3) and Wired Equivalent Privacy (WEP) Mesh Network FragAttacks

Introducing Amazon Bedrock AgentCore Identity: Securing agentic AI at scale

CVE-2025-6686 – Elementor Magic Buttons Stored Cross-Site Scripting Vulnerability

CVE-2025-46617 – Quantum StorNext Web GUI API Unauthorized Configuration Access and Modification

Related Posts