Aggregator

A vulnerability was found in Helix Core up to 2024.1 and classified as critical. This issue affects some unknown processing of the component Auto-Generation. The manipulation leads to resource consumption. The identification of this vulnerability is CVE-2024-10314. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in PHPGurukul Online Marriage Registration System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /omrs/admin/search.php of the component POST Request Parameter Handler. The manipulation of the argument searchdata leads to cross site scripting. This vulnerability was named CVE-2024-51054. The attack can be initiated remotely. There is no exploit available.

Customers can now easily integrate Sweet’s runtime detection and response platform into their AWS environments Sweet Security today announced the availability of its cloud-native detection and response platform on the Amazon Web Services (AWS) marketplace. Sweet’s solution unifies threat detection across cloud infrastructure, network, workloads, and applications. It provides deep runtime context that enables security […]

The post Sweet Security Announces Availability of its Cloud Native Detection & Response Platform on the AWS Marketplace appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The post Sweet Security Announces Availability of its Cloud Native Detection & Response Platform on the AWS Marketplace appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability, which was classified as problematic, was found in PHPGurukul Online Marriage Registration System 1.0. This affects an unknown part of the file /omrs/user/search.php of the component POST Request Parameter Handler. The manipulation of the argument searchdata leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-50990. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.11.6. Affected by this issue is the function __mt_dup of the component fork. The manipulation leads to allocation of resources. This vulnerability is handled as CVE-2024-50263. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in mDNSResponder up to 625.41.1. It has been rated as very critical. Affected by this issue is the function CopyNSEC3ResourceRecord. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2015-7987. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Забытые устройства превращаются в лёгкую добычу для киберпреступников.

Companies and organizations need to recognize the importance of investing in engineers who possess both the soft and hard skills required to secure open source software effectively.

A vulnerability has been found in Ubuntu lxd and classified as problematic. This vulnerability affects unknown code in the library /var/lib/lxd/unix.socket. The manipulation leads to improper access controls. This vulnerability was named CVE-2015-8222. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in mDNSResponder up to 625.41.1. It has been declared as very critical. Affected by this vulnerability is the function rfc3110_import. The manipulation leads to memory corruption. This vulnerability is known as CVE-2015-7987. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in mDNSResponder up to 625.41.1. It has been classified as very critical. Affected is the function GetValueForMACAddr. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2015-7987. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Fortinet researchers discovered a new phishing campaign spreading a variant of the commercial malware Remcos RAT. Fortinet’s FortiGuard Labs recently uncovered a phishing campaign spreading a new variant of the Remcos RAT. Remcos is a commercial remote administration tool (RAT) that is sold online to allow buyers remote control over computers. Threat actors use Remcos […]

A vulnerability, which was classified as critical, was found in Aspburst myNewsletter 1.1.2. Affected is an unknown function of the file validatelogin.asp of the component Login. The manipulation of the argument UserName leads to sql injection. This vulnerability is traded as CVE-2006-2887. It is possible to launch the attack remotely. Furthermore, there is an exploit available.