Aggregator

CVE-2025-58589 | SICK Baggage Analytics information exposure

VulDB Recent Entries
1 day 15 hours ago
A vulnerability was found in SICK Baggage Analytics, Tire Analytics, Package Analytics and Logistic Diagnostic Analytics. It has been declared as problematic. The affected element is an unknown function. Executing manipulation can lead to information exposure through error message. This vulnerability is handled as CVE-2025-58589. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-58587 | SICK Baggage Analytics excessive authentication

VulDB Recent Entries
1 day 15 hours ago
A vulnerability was found in SICK Baggage Analytics, Tire Analytics, Package Analytics, Logistic Diagnostic Analytics and Enterprise Analytics. It has been classified as problematic. Impacted is an unknown function. Performing manipulation results in improper restriction of excessive authentication attempts. This vulnerability is known as CVE-2025-58587. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

CVE-2025-58586 | SICK Baggage Analytics Login observable response discrepancy

VulDB Recent Entries
1 day 15 hours ago
A vulnerability was found in SICK Baggage Analytics, Tire Analytics, Package Analytics, Logistic Diagnostic Analytics and Enterprise Analytics and classified as problematic. This issue affects some unknown processing of the component Login. Such manipulation leads to observable response discrepancy. This vulnerability is traded as CVE-2025-58586. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-58580 | SICK Enterprise Analytics POST Request neutralization for logs (EUVD-2025-32499)

VulDB Recent Entries
1 day 15 hours ago
A vulnerability, which was classified as critical, has been found in SICK Enterprise Analytics. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation leads to improper output neutralization for logs. This vulnerability is documented as CVE-2025-58580. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2025-59728 | FFmpeg MPEG-DASH up to 7.x MPEG-DASH Manifest out-of-bounds write (WID-SEC-2025-2130)

VulDB Recent Entries
1 day 15 hours ago
A vulnerability classified as critical was found in FFmpeg MPEG-DASH up to 7.x. Affected by this vulnerability is an unknown functionality of the component MPEG-DASH Manifest Handler. Executing manipulation can lead to out-of-bounds write. This vulnerability is registered as CVE-2025-59728. The attack requires access to the local network. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-58584 | SICK Baggage Analytics HTTP Request get request method with sensitive query strings

VulDB Recent Entries
1 day 15 hours ago
A vulnerability classified as problematic has been found in SICK Baggage Analytics, Tire Analytics, Package Analytics, Logistic Diagnostic Analytics and Enterprise Analytics. Affected is an unknown function of the component HTTP Request Handler. Performing manipulation results in use of get request method with sensitive query strings. This vulnerability is cataloged as CVE-2025-58584. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

From Deception to Defense: Understanding and Combating Phishing

不安全
1 day 15 hours ago
Phishing is a cyberattack targeting sensitive info or harmful actions, evolving with AI and deepfakes. Research spans six areas: empirical, technical, psychological, policy, emerging tech, and ethical/legal. Studies highlight the need for adaptive defenses and global collaboration to counter persistent threats.

AI & IAM: Where Security Gets Superhuman (Or Supremely Stuck) - Matt Immler, Heather Ceylan, Alexander Makarov, Nitin Raina, Dor Fledel, Aaron Parecki - ESW #427

不安全
1 day 15 hours ago
Oktane 2025会议上讨论了身份在保护AI驱动企业中的重要性。随着SaaS和AI代理的普及，组织面临大量人类和非人类身份带来的风险。专家们分享了如何通过管理AI代理、统一身份、开放标准和嵌入式AI来增强数据保护，并探讨了加强防御的方法以应对社会工程攻击等威胁。

Hackers Exploit WordPress Sites by Silently Injecting Malicious PHP Code

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 day 16 hours ago

Cybercriminals have ramped up attacks on WordPress websites by stealthily modifying theme files to serve unauthorized third-party scripts. This campaign leverages subtle PHP injections in the active theme’s functions.php to fetch external code, effectively turning compromised sites into silent distributors of malicious ads and malware. The breach came to light when the site owner noticed […]

The post Hackers Exploit WordPress Sites by Silently Injecting Malicious PHP Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

Managed ad