4M+ Internet-Exposed Systems at Risk From Tunneling Protocol Vulnerabilities

July 17, 2025

4M+ Internet-Exposed Systems at Risk From Tunneling Protocol Vulnerabilities

Researchers have uncovered critical security vulnerabilities affecting millions of computer servers and routers worldwide, stemming from the insecure implementation of fundamental internet tunneling p …

Published Date:
Jul 17, 2025 (5 hours, 30 minutes ago)

Vulnerabilities has been mentioned in this article.

Source: Read More

Previous ArticleH2Miner Attacking Linux, Windows, and Containers to Mine Monero

Next Article Cisco Warns of Critical ISE Flaw Allowing Unauthenticated Attackers to Execute Root Code

Highlights

CVE-2025-5140 – Seeyon Zhiyuan OA Web Application System Server-Side Request Forgery Vulnerability

May 25, 2025

CVE ID : CVE-2025-5140

Published : May 25, 2025, 2:15 a.m. | 2 hours, 48 minutes ago

Description : A vulnerability classified as critical has been found in Seeyon Zhiyuan OA Web Application System up to 8.1 SP2. This affects the function this.oursNetService.getData of the file comourswwwehropenPlatform1open4ClientTypecontrollerThirdMenuController.class. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity: 6.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Report: 71% of tech leaders won’t hire devs without AI skills

Slack’s AI search now works across an organization’s entire knowledge base

In-House vs Outsourcing for React.js Development: Understand What Is Best for Your Enterprise

Tiny Screens, Big Impact: The Forgotten Art Of Developing Web Apps For Feature Phones

Too many open browser tabs? This is still my favorite solution – and has been for years

This new browser won’t monetize your every move – how to try it

Pokémon has partnered with one of the biggest PC gaming brands again, and you can actually buy these accessories — but do you even want to?

AMD’s budget Ryzen AI 5 330 processor will introduce a wave of ultra-affordable Copilot+ PCs with its mobile 50 TOPS NPU

The details of TC39’s last meeting

The details of TC39’s last meeting

Reclaim Space: Delete Docker Orphan Layers

Notes Android App Using SQLite

KeySmith – SSH key management

KeySmith – SSH key management

Pokémon has partnered with one of the biggest PC gaming brands again, and you can actually buy these accessories — but do you even want to?

AMD’s budget Ryzen AI 5 330 processor will introduce a wave of ultra-affordable Copilot+ PCs with its mobile 50 TOPS NPU

4M+ Internet-Exposed Systems at Risk From Tunneling Protocol Vulnerabilities

4M+ Internet-Exposed Systems at Risk From Tunneling Protocol Vulnerabilities

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit

How to Use Pytest: A Simple Guide to Testing in Pytho

PWC-IDMC Migration Gaps

HNS-2025-10 – HN Security Advisory – Local privilege escalation in Zyxel uOS

CVE-2023-41839 – Apache Struts Unvalidated Redirect to Malicious Site

CVE-2025-5140 – Seeyon Zhiyuan OA Web Application System Server-Side Request Forgery Vulnerability

CVE-2025-43016 – JetBrains Rider Unvalidated Archive Unpacking Vulnerability

Critical Vulnerabilities Found in Schneider Electric’s EcoStruxure IT Data Center Expert

Here’s a faster way to download files on Linux – without a web browser

4M+ Internet-Exposed Systems at Risk From Tunneling Protocol Vulnerabilities

4M+ Internet-Exposed Systems at Risk From Tunneling Protocol Vulnerabilities

Related Posts