Aggregator

CVE-2025-13491 | IBM App Connect Operator untrusted search path

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in IBM App Connect Operator and App Connect EnterpriseCertified Containers Operands. It has been rated as problematic. The impacted element is an unknown function. Performing a manipulation results in untrusted search path. This vulnerability is known as CVE-2025-13491. Attacking locally is a requirement. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2020-37151 | Ciprianmp phpMyChat Plus 1.98 deluser.php pmc_username sql injection (Exploit 48066)

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in Ciprianmp phpMyChat Plus 1.98. It has been declared as critical. The affected element is an unknown function of the file deluser.php. Such manipulation of the argument pmc_username leads to sql injection. This vulnerability is traded as CVE-2020-37151. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-14150 | IBM webMethods Integration up to 10.15/11.1/2411.1 User Information exposure of sensitive system information to an unauthorized control sphere

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in IBM webMethods Integration up to 10.15/11.1/2411.1. It has been classified as problematic. Impacted is an unknown function of the component User Information Handler. This manipulation causes exposure of sensitive system information to an unauthorized control sphere. This vulnerability appears as CVE-2025-14150. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

美国中央情报局停止发布《世界概况》

黑鸟
3 months 1 week ago
美国中央情报局（CIA）宣布将停止出版《世界概况》，这是一个被全球数百万人使用的免费在线资源。 《世界概况》经常被记者和学者引用，它以易于理解和搜索的格式，定期更新世界各地国家和社区的统计数据和信息。 中央情报局网站上的一份声明没有说明做出这一决定的原因，只是表示该出版物已经“停刊”，同时鼓励读者“保持对世界的好奇心，并寻找探索世界的方法……无论是亲自探索还是虚拟探索”。 该计划于 1947 年被中央情报局接管，并更名为国家情报调查，之后于 1971 年推出了《概况手册》，作为年度信息摘要。 1975 年，该报告的非机密版本首次向公众发布；20 世纪 90 年代，该报告的数字版本在线发布，数据根据公共领域免费提供。 根据该网站之前的版本显示，该网站在美国学年期间尤其受欢迎，而在美国暑假期间，访问量则明显下降，据称很多照片是雇员们去旅游的时候拍下来的。 虽然尚未给出关闭《世界概况》的具体原因，但特朗普需要削减政府项目，认为这些项目无助于推进其机构和部门的核心目标。 去年 2 月，美国政府向所有中央情报局雇员提供了买断方案，据报道，政府计划在未来几年内进一步裁减该机构约 1200 个工作岗位。 目前《世界概况》可以查阅的地址只有网站缓存库里了，目前原来网站打开就是图1的样子 https://web.archive.org/web/20260204071503/https://www.cia.gov/the-world-factbook/ 图三之后都是之前的页面，几年前看的时候觉得留着以后再看，没想到现在只能通过缓存库看了，真是岁月不饶人啊。

CVE-2026-23065 | Linux Kernel up to 6.12.67/6.18.7/6.19-rc6 wbrf_record memory leak (Nessus ID 297960)

Vuldb Updates
3 months 1 week ago
A vulnerability classified as critical has been found in Linux Kernel up to 6.12.67/6.18.7/6.19-rc6. The impacted element is the function wbrf_record. This manipulation causes memory leak. The identification of this vulnerability is CVE-2026-23065. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-25234 | pear pearweb up to 1.32.x Category Manager sql injection (GHSA-q28j-3p7r-6722 / Nessus ID 297962)

Vuldb Updates
3 months 1 week ago
A vulnerability labeled as critical has been found in pear pearweb up to 1.32.x. This affects an unknown part of the component Category Manager. Such manipulation leads to sql injection. This vulnerability is referenced as CVE-2026-25234. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.
vuldb.com

CVE-2026-23097 | Linux Kernel up to 6.6.121/6.12.67/6.18.7/6.19-rc6 mm/rmap.c migrate_pages deadlock (Nessus ID 297961)

Vuldb Updates
3 months 1 week ago
A vulnerability was found in Linux Kernel up to 6.6.121/6.12.67/6.18.7/6.19-rc6. It has been declared as critical. This affects the function migrate_pages of the file mm/rmap.c. Executing a manipulation can lead to deadlock. This vulnerability appears as CVE-2026-23097. The attacker needs to be present on the local network. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-23100 | Linux Kernel up to 6.18.7/6.19-rc6 hugetlb hugetlb_pmd_shared reference count (Nessus ID 297963)

Vuldb Updates
3 months 1 week ago
A vulnerability described as critical has been identified in Linux Kernel up to 6.18.7/6.19-rc6. This impacts the function hugetlb_pmd_shared of the component hugetlb. Such manipulation leads to improper update of reference count. This vulnerability is uniquely identified as CVE-2026-23100. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-23052 | Linux Kernel up to 6.18.6/6.19-rc5 ftrace_process_locs allocation of resources (Nessus ID 297964)

Vuldb Updates
3 months 1 week ago
A vulnerability was found in Linux Kernel up to 6.18.6/6.19-rc5. It has been rated as critical. Affected by this issue is the function ftrace_process_locs. This manipulation causes allocation of resources. This vulnerability appears as CVE-2026-23052. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

CVE-2025-71192 | Linux Kernel up to 6.1.160/6.6.120/6.12.65/6.18.5/6.19-rc4 ALSA snd_ac97_controller_register double free (Nessus ID 297966 / WID-SEC-2026-0324)

Vuldb Updates
3 months 1 week ago
A vulnerability classified as critical was found in Linux Kernel up to 6.1.160/6.6.120/6.12.65/6.18.5/6.19-rc4. Impacted is the function snd_ac97_controller_register of the component ALSA. The manipulation results in double free. This vulnerability is identified as CVE-2025-71192. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

Akira

Dark Feed IO
3 months 1 week ago

You must login to view this content

cohenido

OpenAI Frontier organizes AI agents under one system

Help Net Security
3 months 1 week ago

OpenAI introduced Frontier, a platform designed to organize AI agents that perform business tasks within internal systems and workflows. The platform connects data from multiple internal systems including customer relationship management tools, ticketing platforms, and data warehouses. This integration creates a shared knowledge layer that allows AI agents to understand business processes and decision points across departments. “We’ve learned that teams don’t just need better tools that solve pieces of the puzzle. They needed help … More →

The post OpenAI Frontier organizes AI agents under one system appeared first on Help Net Security.

Sinisa Markovic

Managed ad