Security Digest archive
July 2025
3 editorial briefs, 20 known exploited (cisa kev) additions and 23 critical advisories across 20 digest days.
Wednesday, July 30, 2025
- Critical 1 advisory: github.com/oauth2-proxy/oauth2-proxy/v7
Tuesday, July 29, 2025
- Critical 1 advisory: bentoml
Monday, July 28, 2025
- KEV CVE-2025-20337 Cisco Identity Services Engine
- KEV CVE-2025-20281 Cisco Identity Services Engine
- KEV CVE-2023-2533 PaperCut NG/MF
- Critical 2 advisories: codeigniter4/framework, @node-saml/node-saml
Sunday, July 27, 2025
- Critical 1 advisory: smolagents
Friday, July 25, 2025
- Critical 2 advisories: node-saml, tj-actions/branch-names
Thursday, July 24, 2025
- Critical 1 advisory: org.xwiki.platform:xwiki-platform-distr…
Wednesday, July 23, 2025
- Most can relax Amazon Q VS Code Extension 1.84.0 Shipped a Wiper Prompt
Tuesday, July 22, 2025
- KEV CVE-2025-6558 Google Chromium
- KEV CVE-2025-54309 CrushFTP CrushFTP
- KEV CVE-2025-49706 Microsoft SharePoint
- KEV CVE-2025-49704 Microsoft SharePoint
- KEV CVE-2025-2776 SysAid SysAid On-Prem
- KEV CVE-2025-2775 SysAid SysAid On-Prem
Monday, July 21, 2025
- Critical 4 advisories: form-data, @haxtheweb/haxcms-nodejs, marshmallow/nova-tiptap, nokogiri
Sunday, July 20, 2025
- KEV CVE-2025-53770 Microsoft SharePoint
Saturday, July 19, 2025
- Check exposure ToolShell: SharePoint On-Prem Unauthenticated RCE Chain
Friday, July 18, 2025
- KEV CVE-2025-25257 Fortinet FortiWeb
- Critical 1 advisory: simogeo/filemanager
Thursday, July 17, 2025
- Critical 2 advisories: github.com/NVIDIA/nvidia-container-tool…, livewire/livewire
Tuesday, July 15, 2025
- Critical 1 advisory: pyload-ng
Monday, July 14, 2025
- KEV CVE-2025-47812 Wing FTP Server Wing FTP Server
- Critical 4 advisories: org.xwiki.rendering:xwiki-rendering-syn…, binarytorch/larecipe, job-iteration, org.xwiki.rendering:xwiki-rendering-tra…
Thursday, July 10, 2025
- KEV CVE-2025-5777 Citrix NetScaler ADC and Gateway
Wednesday, July 9, 2025
- Check exposure mcp-remote: OS Command Injection via OAuth Endpoint
- Critical 3 advisories: @builder.io/qwik-city, docusaurus-plugin-content-gists, mcp-remote
Monday, July 7, 2025
- KEV CVE-2019-9621 Synacor Zimbra Collaboration Suite (ZCS)
- KEV CVE-2019-5418 Rails Ruby on Rails
- KEV CVE-2016-10033 PHP PHPMailer
- KEV CVE-2014-3931 Looking Glass Multi-Router Looking Glass (MRLG)
Wednesday, July 2, 2025
- KEV CVE-2025-6554 Google Chromium V8
Tuesday, July 1, 2025
- KEV CVE-2025-48928 TeleMessage TM SGNL
- KEV CVE-2025-48927 TeleMessage TM SGNL