Aggregator

CVE-2025-49432 | FWDesign Ultimate Video Player Plugin up to 10.1 on WordPress authorization (EUVD-2025-25027)

Vuldb Updates
4 weeks 2 days ago
A vulnerability was found in FWDesign Ultimate Video Player Plugin up to 10.1 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to missing authorization. This vulnerability is handled as CVE-2025-49432. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-49897 | gopiplus Vertical Scroll Slideshow Gallery V2 Plugin up to 9.1 on WordPress sql injection (EUVD-2025-25028)

Vuldb Updates
4 weeks 2 days ago
A vulnerability categorized as critical has been discovered in gopiplus Vertical Scroll Slideshow Gallery V2 Plugin up to 9.1 on WordPress. This affects an unknown part. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2025-49897. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-55207 | withastro up to 9.4.0 //astro.build/press redirect (EUVD-2025-25029)

Vuldb Updates
4 weeks 2 days ago
A vulnerability identified as problematic has been detected in withastro astro up to 9.4.0. This vulnerability affects unknown code of the file //astro.build/press. The manipulation leads to open redirect. This vulnerability was named CVE-2025-55207. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Koninklijk en militair eerbetoon bij Indisch Monument

Defensie.nl - Nieuwsberichten
4 weeks 2 days ago
Als de Indische klok luidt, staan er al duizenden mensen te wachten bij het Indisch monument in Den Haag. Koning Willem-Alexander loopt er met statige pas naartoe. Op zijn revers blinkt het melati-speldje, de Indische jasmijn die veel Indische Nederlanders op 15 augustus dragen. Ze herdenken hiermee de slachtoffers die tijdens de Tweede Wereldoorlog zijn gevallen in het voormalige Nederlands-Indië.

CVE-2003-0424 | Apple QuickTime/Darwin Streaming Server up to 4.1.3e URL Encoding Source information disclosure (ID 11361 / XFDB-12694)

Vuldb Updates
4 weeks 2 days ago
A vulnerability has been found in Apple QuickTime and Darwin Streaming Server up to 4.1.3e and classified as critical. Affected by this issue is some unknown functionality of the component URL Encoding Handler. The manipulation with the input %20 leads to information disclosure (Source). This vulnerability is handled as CVE-2003-0424. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Google Requires Crypto App Developers to Have License or Certification From Relevant Authorities

Cyber Security News
4 weeks 2 days ago

Google Play has implemented comprehensive licensing requirements for cryptocurrency exchanges and software wallets, fundamentally reshaping the mobile app ecosystem for digital asset services. The policy mandates that developers seeking to publish cryptocurrency applications must obtain specific licenses and certifications from relevant financial authorities in their target jurisdictions before distribution through Google’s platform. The new regulatory […]

The post Google Requires Crypto App Developers to Have License or Certification From Relevant Authorities appeared first on Cyber Security News.

Tushar Subhra Dutta

INC

Dark Feed IO
4 weeks 2 days ago

You must login to view this content

cohenido

Pakistan's Oil and Gas Sector Hit by Blue Locker Ransomware

Ransomware DataBreachToday.com
4 weeks 2 days ago
Ransomware Attacks Pummel Critical National Infrastructure Sectors, Experts Warn
The oil and gas sector in Pakistan is on high alert following a ransomware attack against the state-owned oil and gas company Pakistan Petroleum, an instance of ransomware impacting critical infrastructure in a year that has already tallied hundreds of incidents.

Navigating Multiple State AI Laws in the Wake of US Deregulation

Ransomware DataBreachToday.com
4 weeks 2 days ago
Schellman CEO Avani Desai on Balancing Innovation and Compliance in Uncertain Market
The Trump administration’s AI action plan signals a major deregulatory shift, setting up a patchwork of state regulations on AI deployments. Company policies must be “flexible enough to meet the strictest state without rewriting them every few months," said Avani Desai, CEO, Schellman.

Threat Actors Using CrossC2 Tool to Expand Cobalt Strike to Operate on Linux and macOS

Cyber Security News
4 weeks 2 days ago

A sophisticated threat campaign has emerged that leverages CrossC2, an unofficial extension tool that expands Cobalt Strike’s notorious capabilities beyond Windows systems to target Linux and macOS environments. Between September and December 2024, cybersecurity incidents involving this cross-platform malware have been documented, representing a significant evolution in threat actor tactics that traditionally focused on Windows-based […]

The post Threat Actors Using CrossC2 Tool to Expand Cobalt Strike to Operate on Linux and macOS appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2024-56406 | Perl up to 5.34.3/5.36.3/5.38.3/5.40.1 S_do_trans_invmap heap-based overflow (Nessus ID 234241 / WID-SEC-2025-1850)

Vuldb Updates
4 weeks 2 days ago
A vulnerability, which was classified as critical, was found in Perl up to 5.34.3/5.36.3/5.38.3/5.40.1. This affects the function S_do_trans_invmap. The manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2024-56406. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad