July 2025 – Page 7 – TheCyberThrone

CVE-2025-20309 affects Cisco Unified CM

🔎 Vulnerability Overview CVE ID: CVE-2025-20309 Severity: Critical (CVSS v3.1 Score: 10.0) Discovered in: Cisco Unified Communications Manager (Unified CM) and Session Management Edition (SME) Type: Hardcoded credential / Authentication…

PravinKarthik July 3, 2025

CISA Adds TelelMessage TM SGNL to KEV Catalog

CVE-2025-48927 — Insecure Spring Boot Heap Dump Exposure 📌 Description: This vulnerability exists in TeleMessage TM SGNL due to an exposed Spring Boot Actuator /heapdump endpoint, accessible without authentication. This…

PravinKarthik July 2, 2025

Esse Health Discloses a Data Breach

🔍 1. Incident Overview What Happened: On April 21, 2025, Esse Health—a leading physician group with over 50 locations in the St. Louis area—detected unauthorized access to portions of its…

PravinKarthik July 2, 2025

CVE-2025-6554 Actively Exploited Google Chrome Zeroday

🧾 Overview CVE-2025-6554 is a high-severity zero-day vulnerability discovered in Google Chrome’s V8 JavaScript engine, which is responsible for processing JavaScript in the browser. The flaw is classified as a…

PravinKarthik July 1, 2025

CISA Adds Critical Citrix NetScaler Vulnerability to KEV Catalog

On June 30, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-6543, a critical buffer overflow vulnerability in Citrix NetScaler ADC and Gateway, to its Known Exploited Vulnerabilities (KEV)…

PravinKarthik July 1, 2025