Author CERT Polska | CERT Polska

20 August 2025 CERT Polska #vulnerability #warning #cve

Vulnerabilities in OpenSolution Quick.CMS and Quick.CMS.Ext software

CERT Polska has received a report about 3 vulnerabilities (CVE-2025-54172, CVE-2025-54174 and CVE-2025-54175) found in OpenSolution Quick.CMS and Quick.CMS.Ext software.

14 August 2025 CERT Polska #vulnerability #warning #cve

Vulnerability in Akcess-Net Lepszy BIP software

Cross-site Scripting (XSS) vulnerability (CVE-2025-7761) has been found in Akcess-Net Lepszy BIP software.

11 August 2025 CERT Polska #vulnerability #warning #cve

TCC Bypass vulnerabilities in six applications for MacOS

TCC Bypass vulnerabilities has been found in GIMP (CVE-2025-8672), Mosh-Pro (CVE-2025-53811), Cursor (CVE-2025-9190), MacVim (CVE-2025-8597), Nozbe (CVE-2025-53813) and Invoice Ninja (CVE-2025-8700) applications for MacOS.

07 August 2025 CERT Polska #vulnerability #warning #cve

Vulnerability in Flexibits Fantastical software

Incorrect Authorization vulnerability (CVE-2025-8533) has been found in Flexibits Fantastical software.

29 July 2025 CERT Polska #vulnerability #warning #cve

Vulnerability in TSplus Remote Access software

Insufficiently Protected Credentials vulnerability (CVE-2025-5922) has been found in TSplus Remote Access software.

21 July 2025 CERT Polska #vulnerability #warning #cve

Vulnerability in FARA software

CERT Polska has received a report about Hard-coded Credentials vulnerability (CVE-2025-4049) found in SIGNUM-NET FARA software.

17 July 2025 CERT Polska #vulnerability #warning #cve

Vulnerabilities in applications preloaded on Bluebird smartphones

CERT Polska has received a report about 3 vulnerabilities (from CVE-2025-5344 to CVE-2025-5346) found in applications preloaded on Bluebird smartphones.

07 July 2025 CERT Polska #vulnerability #warning #cve

Vulnerability in SUR-FBD CMMS software

Use of Hard-coded Password vulnerability (CVE-2025-3920) has been found in SUR-FBD CMMS software.

20 June 2025 CERT Polska #vulnerability #warning #cve

TCC Bypass vulnerabilities in two macOS applications

TCC Bypass vulnerability has been found in two macOS applications: Phoneix Code (CVE-2025-5255), Postbox (CVE-2025-5963).

05 June 2025 CERT Polska #analysis #CVE-2024-42009 #roundcube #unc1151

UNC1151 exploiting Roundcube to steal user credentials in a spearphishing campaign

CERT Polska is observing a malicious email campaign conducted by the UNC1151 group against Polish entities, exploiting a vulnerability in the Roundcube software.