Aggregator

CVE-2024-53936 | com.asianmobile.callcolor up to 24 on Android CallActivity Component permission (EUVD-2024-52198)

Vuldb Updates
7 months 4 weeks ago
A vulnerability classified as problematic has been found in com.asianmobile.callcolor up to 24 on Android. Affected is an unknown function of the component CallActivity Component. The manipulation leads to permission issues. This vulnerability is traded as CVE-2024-53936. The attack needs to be approached locally. There is no exploit available.
vuldb.com

CVE-2025-6410 | PHPGurukul Art Gallery Management System 1.1 edit-art-medium-detail.php editid sql injection (EUVD-2025-18816)

Vuldb Updates
7 months 4 weeks ago
A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been classified as critical. Affected is an unknown function of the file /admin/edit-art-medium-detail.php. The manipulation of the argument editid leads to sql injection. This vulnerability is traded as CVE-2025-6410. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2006-3976 | CA eTrust Antivirus WebScan up to 1.1.0.1047 memory corruption (Nessus ID 22160 / ID 115385)

Vuldb Updates
7 months 4 weeks ago
A vulnerability was found in CA eTrust Antivirus WebScan up to 1.1.0.1047. It has been rated as very critical. Affected by this issue is some unknown functionality. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2006-3976. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2006-3228 | NullSoft WinAmp up to 5.23 MIDI File in_midi.dll memory corruption (EDB-1935 / Nessus ID 21738)

Vuldb Updates
7 months 4 weeks ago
A vulnerability was found in NullSoft WinAmp and classified as critical. This issue affects some unknown processing in the library in_midi.dll of the component MIDI File Handler. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2006-3228. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2006-3231 | IBM WebSphere Application Server up to 6.0.2.10 JSP File information disclosure (ID 86741 / BID-22991)

Vuldb Updates
7 months 4 weeks ago
A vulnerability, which was classified as problematic, has been found in IBM WebSphere Application Server up to 6.0.2.10. This issue affects some unknown processing of the component JSP File Handler. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2006-3231. Attacking locally is a requirement. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2006-3231 | IBM WebSphere Application Server up to 6.0.2.10 UserNameToken Cache information disclosure (ID 86741 / XFDB-32316)

Vuldb Updates
7 months 4 weeks ago
A vulnerability, which was classified as problematic, was found in IBM WebSphere Application Server up to 6.0.2.10. Affected is an unknown function of the component UserNameToken Cache. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2006-3231. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2006-3226 | Cisco Secure Access Control Server 4.x Session Management Remote Code Execution (ID 38550 / XFDB-27328)

Vuldb Updates
7 months 4 weeks ago
A vulnerability was found in Cisco Secure Access Control Server 4.x and classified as critical. This issue affects some unknown processing of the component Session Management. The manipulation leads to Remote Code Execution. The identification of this vulnerability is CVE-2006-3226. The attack may be initiated remotely. There is no exploit available.
vuldb.com

CVE-2014-9013 | WP Marketplace Plugin 2.4.0 on WordPress cart.php ajaxinit wp_insert_user input validation (EDB-36466)

Vuldb Updates
7 months 4 weeks ago
A vulnerability was found in WP Marketplace Plugin 2.4.0 on WordPress. It has been rated as critical. Affected by this issue is the function ajaxinit in the library wpmarketplace/libs/cart.php. The manipulation of the argument wp_insert_user as part of Request leads to improper input validation. This vulnerability is handled as CVE-2014-9013. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

Qilin

Dark Feed IO
7 months 4 weeks ago

You must login to view this content

cohenido

Iranian Hacktivist Attacking Israeli Military, Government, and Infrastructure Targets

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
7 months 4 weeks ago

Over 35 different pro-Iranian hacktivist organizations launched a coordinated attack on Israeli military, government, and key infrastructure targets in a dramatic escalation of cyberwarfare. This surge in activity starkly contrasts with the limited response from just 4-5 identified pro-Israeli groups, highlighting a significant imbalance in the ongoing digital conflict between the two nations. Unprecedented Surge […]

The post Iranian Hacktivist Attacking Israeli Military, Government, and Infrastructure Targets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

CVE-2006-3231 | IBM WebSphere Application Server up to 6.0.2.10 Datasource Password Encryption (ID 86741 / BID-18578)

Vuldb Updates
7 months 4 weeks ago
A vulnerability classified as critical has been found in IBM WebSphere Application Server up to 6.0.2.10. This affects an unknown part of the component Datasource Password Encryption. The manipulation leads to an unknown weakness. This vulnerability is uniquely identified as CVE-2006-3231. The attack needs to be approached within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2006-3231 | IBM WebSphere Application Server up to 6.0.2.10 Configuration Object information disclosure (ID 86741 / BID-22991)

Vuldb Updates
7 months 4 weeks ago
A vulnerability classified as problematic was found in IBM WebSphere Application Server up to 6.0.2.10. This vulnerability affects unknown code of the component Configuration Object Handler. The manipulation leads to information disclosure. This vulnerability was named CVE-2006-3231. The attack can only be done within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2006-3232 | IBM WebSphere Application Server up to 6.0.2.10 UserNameToken Cache Remote Code Execution (ID 87077 / BID-18578)

Vuldb Updates
7 months 4 weeks ago
A vulnerability classified as very critical has been found in IBM WebSphere Application Server up to 6.0.2.10. This affects an unknown part of the component UserNameToken Cache. The manipulation leads to Remote Code Execution. This vulnerability is uniquely identified as CVE-2006-3232. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Weekly Update 457

Troy Hunt
7 months 4 weeks ago

Firstly, apologies for the annoying clipping in the audio. I use a Rode VideoMic that's a shotgun style that plugs straight into the iPhone and it's usually pretty solid. It was also solid when I tested it again now, just recording a video into the phone,

Troy Hunt

天文学家发现失落普通物质的线索

Solidot
7 months 4 weeks ago
天文学家在观测宇宙最大的星系聚集区域— Shapley 超星系团（Shapley Supercluster）时，发现一条长达约2,300 万光年的细丝状高温星际气体，可能正是寻找失落普通物质的关键线索。这条高温气体位于 Shapley 超星系团中的 4 个次星系团；A3528N、A3528S与A3530、A3532之 间，此细丝状气体以超过一千万度的高温辐射 X 射线，总质量约相当于 10 个银河系。研究指出，这正符合宇宙学模拟中预测，存在宇宙网中的细丝状星际气体的特征。宇宙网是由暗物质构成的庞大纤维状结构，贯穿星系间的星际空间，成为星系之间相互交换气体的通道。 根据宇宙微波背景辐射（CMB）推算，宇宙初期的普通物质数量明确可知；然而，当今宇宙中能直接观测到的恒星、星系、行星、气体与尘埃，仅占预期的一半。在宇宙学中被称为「普通物质遗失问题」。由于物质不会凭空消失，因此这些「消失的」普通物质究竟隐藏在何处，一直是近年来天文观测与理论研究的重要议题。这项发现提供了有力证据，支持「失落普通物质」分布于星系间极度稀薄、难以直接探测的宇宙网细丝状结构中的说法。

Kopstukken krijgen voorproefje van NAVO-top

Defensie.nl - Nieuwsberichten
7 months 4 weeks ago
Defensie is klaar voor haar omvangrijke rol tijdens de NAVO-top op dinsdag en woensdag in Den Haag. “Ik ben enorm trots dat wij als Defensie de NAVO-top, samen met civiele partners, mogelijk kunnen maken. En dat wij als Nederland deze historische top op deze manier kunnen organiseren.” Dat zei minister Ruben Brekelmans vanmiddag na afloop van rondleidingen op 3 locaties die belangrijk zijn tijdens de top.

CVE-2024-6235

CVE Trends
7 months 4 weeks ago
Currently trending CVE - Hype Score: 20 - Sensitive information disclosure in NetScaler Console

Managed ad