Aggregator

VDB-325686 | Amazon AWS Bedrock Model access control

VulDB Recent Entries
4 months 2 weeks ago
A vulnerability has been found in Amazon AWS and classified as critical. This affects an unknown function of the component Bedrock Model Handler. The manipulation leads to improper access controls. Remote exploitation of the attack is possible. No exploit is available. This product is available as a managed service. Users are not able to maintain vulnerability countermeasures themselves.
vuldb.com

Lynx

Dark Feed IO
4 months 2 weeks ago

You must login to view this content

cohenido

Building a stronger SOC through AI augmentation

Help Net Security
4 months 2 weeks ago

In this Help Net Security interview, Tim Bramble, Director of Threat Detection and Response at OpenText, discusses how SOC teams are gaining value from AI in detecting and prioritizing threats. By learning what “normal” looks like across users and systems, AI helps surface anomalies that rules-based methods often miss. Bramble explains that the greatest value comes from human-AI collaboration, with automation providing insights and analysts applying the judgment and context needed for action. Where exactly … More →

The post Building a stronger SOC through AI augmentation appeared first on Help Net Security.

Mirko Zorz

CVE-2025-10894 | nx devkit backdoor

VulDB Recent Entries
4 months 2 weeks ago
A vulnerability, which was classified as critical, was found in nx. The impacted element is an unknown function of the component devkit. Executing manipulation can lead to backdoor. The identification of this vulnerability is CVE-2025-10894. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-9353 | Themify Builder Plugin up to 7.6.9 on WordPress several cross site scripting

VulDB Recent Entries
4 months 2 weeks ago
A vulnerability, which was classified as problematic, has been found in Themify Builder Plugin up to 7.6.9 on WordPress. The affected element is an unknown function. Performing manipulation of the argument several results in cross site scripting. This vulnerability was named CVE-2025-9353. The attack may be initiated remotely. There is no available exploit.
vuldb.com

CVE-2025-9054 | MultiLoca Plugin up to 4.2.8 on WordPress Setting wcmlim_settings_ajax_handler authorization

VulDB Recent Entries
4 months 2 weeks ago
A vulnerability classified as critical was found in MultiLoca Plugin up to 4.2.8 on WordPress. Impacted is the function wcmlim_settings_ajax_handler of the component Setting Handler. Such manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2025-9054. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2025-56146 | Indian Bank IndSMART Android App 3.8.1 on Android NuWebViewActivity certificate validation

VulDB Recent Entries
4 months 2 weeks ago
A vulnerability classified as critical has been found in Indian Bank IndSMART Android App 3.8.1 on Android. This issue affects some unknown processing of the component NuWebViewActivity. This manipulation causes improper certificate validation. This vulnerability is handled as CVE-2025-56146. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2025-43779 | Liferay Portal/DXP cross site scripting (EUVD-2025-30939 / WID-SEC-2025-2118)

VulDB Recent Entries
4 months 2 weeks ago
A vulnerability categorized as problematic has been discovered in Liferay Portal and DXP. Affected is an unknown function. Such manipulation of the argument _com_liferay_commerce_product_definitions_web_internal_portlet_CPDefinitionsPortlet_productTypeName leads to cross site scripting. This vulnerability is documented as CVE-2025-43779. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-56311 | Shenzhen C-Data Technology FD602GW-DX-R410 2.2.14 Web Management Interface formReboot cross-site request forgery

VulDB Recent Entries
4 months 2 weeks ago
A vulnerability was found in Shenzhen C-Data Technology FD602GW-DX-R410 2.2.14. It has been rated as problematic. This impacts an unknown function of the file /boaform/admin/formReboot of the component Web Management Interface. This manipulation causes cross-site request forgery. This vulnerability is registered as CVE-2025-56311. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

CVE-2024-21935 | AMD Instinct MI300X BKC 24.08 Satellite Management Controller unexpected data type

VulDB Recent Entries
4 months 2 weeks ago
A vulnerability was found in AMD Instinct MI300X BKC 24.08. It has been classified as problematic. The impacted element is an unknown function of the component Satellite Management Controller. The manipulation leads to improper handling of unexpected data type. This vulnerability is listed as CVE-2024-21935. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

Managed ad