Aggregator

The US has issued sanctions against an individual and a company involved in recent high-profile compromises of government officials by Chinese state-affiliated hackers

A vulnerability classified as problematic was found in CP Plus CP-XR-DE21-S Router DE21_S_india_hx806_1.057.043_0023. Affected by this vulnerability is an unknown functionality. The manipulation leads to cookie without 'httponly' flag. This vulnerability is known as CVE-2025-0479. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Cyfirma 的网络安全研究人员最近发现了一个伪装成聊天应用，针对南亚用户的复杂 Android 恶意软件活动。

A vulnerability was found in Croogo 2.0.0. It has been classified as problematic. This affects an unknown part. The manipulation of the argument data[Link][title] leads to cross site scripting. This vulnerability is uniquely identified as CVE-2014-8577. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A newly identified Internet of Things (IoT) botnet has been orchestrating

Microsoft has shared a temporary fix for a known issue that causes classic Outlook to crash when writing, replying to, or forwarding an email. [...]

With the continued mainstreaming of data privacy concerns, nearly all consumer-facing organizations will be forced to treat data GPS as a first-class initiative within their businesses.

The post The 2025 Themes on Data GPS  appeared first on Security Boulevard.

A vulnerability classified as critical has been found in Linux Kernel up to 6.4.10. Affected is the function nf_tables of the component netfilter. The manipulation leads to use after free. This vulnerability is traded as CVE-2023-52923. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Freeform Interactive Purge Jihad up to 2.0.1. It has been classified as very critical. Affected is an unknown function. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2004-0290. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Раскрыты способы оставаться «на плаву» благодаря ботнету-хамелеону KV Botnet.

为AI语音注入“灵魂”

Currently trending CVE - hypeScore: 1 - The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subscriber-level access

Currently trending CVE - hypeScore: 1 - The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution.

Currently trending CVE - hypeScore: 1 - The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution.

A vulnerability, which was classified as problematic, was found in Epic Games Unreal Tournament 3. This affects an unknown part. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2008-7015. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

4 тревожных признака и проверенные методы защиты.