Aggregator

Tenable Agent for Windows Vulnerability Let Attackers Login as Admin to Delete The System Files

Cyber Security News
6 months ago

Tenable, a prominent cybersecurity provider, has released version 10.8.5 of its Agent software to address three critical security vulnerabilities affecting Windows hosts running versions prior to 10.8.5. These flaws, identified as CVE-2025-36631, CVE-2025-36632, and CVE-2025-36633, could allow non-administrative users to exploit SYSTEM-level privileges, potentially leading to severe system compromise or local privilege escalation. Vulnerability Details […]

The post Tenable Agent for Windows Vulnerability Let Attackers Login as Admin to Delete The System Files appeared first on Cyber Security News.

Balaji N

CVE-2007-3590 | b1g b1gBB 2.24 visitenkarte.php User cross site scripting (EDB-4122 / XFDB-35131)

Vuldb Updates
6 months ago
A vulnerability, which was classified as problematic, has been found in b1g b1gBB 2.24. This issue affects some unknown processing of the file visitenkarte.php. The manipulation of the argument User leads to basic cross site scripting. The identification of this vulnerability is CVE-2007-3590. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

NIST Released 19 Zero Trust Architecture Implementations Guide – What’s New

Cyber Security News
6 months ago

The National Institute of Standards and Technology (NIST) has published a new resource to aid organizations in implementing zero trust architectures (ZTAs), a cybersecurity approach that assumes no user or device is inherently trustworthy. The guidance, titled Implementing a Zero Trust Architecture (NIST SP 1800-35), details 19 example ZTA implementations using commercially available technologies, offering […]

The post NIST Released 19 Zero Trust Architecture Implementations Guide – What’s New appeared first on Cyber Security News.

Balaji N

CVE-2025-6040 | Easy Flashcards Plugin up to 0.1 on WordPress Setting ef_settings_submenu cross-site request forgery

Vuldb Updates
6 months ago
A vulnerability was found in Easy Flashcards Plugin up to 0.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function ef_settings_submenu of the component Setting Handler. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2025-6040. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-5589 | StreamWeasels Kick Integration Plugin up to 1.1.3 on WordPress status-classic-offline-text cross site scripting

Vuldb Updates
6 months ago
A vulnerability classified as problematic has been found in StreamWeasels Kick Integration Plugin up to 1.1.3 on WordPress. This affects an unknown part. The manipulation of the argument status-classic-offline-text leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-5589. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

Kali Linux 2025.2 delivers Bloodhound CE, CARsenal, 13 new tools

Help Net Security
6 months ago

OffSec has released Kali Linux 2025.2, the most up-to-date version of the widely used penetration testing and digital forensics platform. KDE Plasma 6.3 in Kali Linux 2025.2 (Source: OffSec) New in Kali Linux 2025.2 As per usual, the newest Kali version comes with new community wallpapers and new versions of the KDE Plasma and GNOME graphical desktop environments. This time around, the Kali Menu is new, as well: it has been reorganized to follow the … More →

The post Kali Linux 2025.2 delivers Bloodhound CE, CARsenal, 13 new tools appeared first on Help Net Security.

Zeljka Zorz

CVE-2004-1924 | Tiki TikiWiki 1.6.1/1.8.1 cross site scripting (EDB-43809 / Nessus ID 14364)

Vuldb Updates
6 months ago
A vulnerability classified as problematic was found in Tiki TikiWiki 1.6.1/1.8.1. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2004-1924. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad