Aggregator

CVE-2024-41169 | Apache Zeppelin up to 0.11.x Cluster Interpreter resource control (EUVD-2024-54778)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability classified as problematic has been found in Apache Zeppelin up to 0.11.x. Affected is an unknown function of the component Cluster Interpreter. The manipulation leads to improper control of resource through lifetime. This vulnerability is traded as CVE-2024-41169. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Hackers Compromise WordPress GravityForms Plugin with Malicious Code Injection

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 month 2 weeks ago

Hackers have targeted the popular WordPress plugin Gravity Forms, injecting malicious code into versions downloaded from the official gravityforms.com domain. The breach was first reported on July 11, 2025, when security researchers noticed suspicious HTTP requests to the domain gravityapi.org, which was registered just days earlier on July 8, 2025. This domain, now suspended by […]

The post Hackers Compromise WordPress GravityForms Plugin with Malicious Code Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

Thermomix TM5 Vulnerabilities Enable Remote Takeover by Attackers

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 month 2 weeks ago

Researchers have uncovered multiple vulnerabilities in the Thermomix TM5, a multifunctional kitchen appliance from Vorwerk, allowing attackers to potentially achieve remote takeover through firmware manipulation and persistent code execution. The device’s main board, powered by a Freescale/NXP i.MX28 SoC with ARM926EJ-S core, integrates a NAND flash (Toshiba TC58NVG0S3HTA00) and DDR2 SDRAM, which were dumped and […]

The post Thermomix TM5 Vulnerabilities Enable Remote Takeover by Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

Hacker Returns $42 Million in Stolen Crypto in Exchange for $5 Million Bounty

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 month 2 weeks ago

A security flaw in the GMX V1 software was made public, causing a significant upheaval in the decentralized finance (DeFi) ecosystem and forcing immediate action to protect user assets. GMX, a prominent perpetual futures trading platform built on blockchain technology, relies on its V1 protocol for liquidity provision through its GLP (GMX Liquidity Provider) token. […]

The post Hacker Returns $42 Million in Stolen Crypto in Exchange for $5 Million Bounty appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

CVE-2023-0698 | Google Chrome up to 109.0.5414.119 WebRTC out-of-bounds (EUVD-2023-12726)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Google Chrome. It has been rated as problematic. This issue affects some unknown processing of the component WebRTC. The manipulation leads to out-of-bounds read. The identification of this vulnerability is CVE-2023-0698. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-0697 | Google Chrome up to 109.0.5414.119 Full Screen Mode Remote Code Execution (EUVD-2023-12725)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Google Chrome. It has been declared as critical. This vulnerability affects unknown code of the component Full Screen Mode. The manipulation leads to Remote Code Execution. This vulnerability was named CVE-2023-0697. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-0687 | GNU C Library 2.38 Call Graph Monitor gmon.c __monstartup buffer overflow (Bug 29444 / EUVD-2023-12716)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in GNU C Library 2.38. It has been declared as problematic. This vulnerability affects the function __monstartup of the file gmon.c of the component Call Graph Monitor. The manipulation leads to buffer overflow. This vulnerability was named CVE-2023-0687. An attack has to be approached locally. There is no exploit available. The real existence of this vulnerability is still doubted at the moment. It is recommended to apply a patch to fix this issue. The inputs that induce this vulnerability are basically addresses of the running application that is built with gmon enabled. It's basically trusted input or input that needs an actual security flaw to be compromised or controlled.
vuldb.com

Microsoft Broadens Zero Trust Training to Address Network and SecOps Domains

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 month 2 weeks ago

Zero Trust architectures are being adopted by enterprises globally to update their security postures in response to the fast changing cyberthreat landscape, where traditional perimeter-based defenses are becoming more and more insufficient. Zero Trust operates on the principle of “never trust, always verify,” mandating continuous authentication, authorization, and validation across all access points. Microsoft has […]

The post Microsoft Broadens Zero Trust Training to Address Network and SecOps Domains appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

Managed ad