Aggregator

A vulnerability was found in IBM Concert Software up to 1.1.0. It has been classified as problematic. Affected is an unknown function of the component Trusted Domain Handler. Performing manipulation results in permissive cross-domain policy with untrusted domains. This vulnerability is identified as CVE-2025-27909. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

Bragg Gaming Group has confirmed a significant cybersecurity incident that compromised the company’s internal IT infrastructure early Saturday morning, August 16, 2025.  The online gaming technology provider discovered unauthorized network intrusion attempts that successfully breached their security perimeter, prompting immediate activation of incident response protocols. Key Takeaways1. Bragg Gaming Group experienced a cybersecurity breach with […]

The post Bragg Confirms Cyber Attack – Hackers Accessed Internal IT Systems appeared first on Cyber Security News.

A sophisticated new cybercriminal technique known as “ghost-tapping” has emerged as a significant threat to contactless payment systems, enabling Chinese-speaking threat actors to exploit stolen payment card details linked to mobile wallet services such as Apple Pay and Google Pay. This innovative attack vector leverages Near Field Communication (NFC) relay tactics to facilitate retail fraud, […]

The post New Ghost-tapping Attacks Steal Customers’ Cards Linked to Services Like Apple Pay and Google Pay appeared first on Cyber Security News.

A vulnerability was found in lunary-ai lunary up to 1.9.22 and classified as critical. This impacts an unknown function of the file /v1/templates of the component API. Such manipulation of the argument projectId leads to improper access controls. This vulnerability is referenced as CVE-2025-4962. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability has been found in IBM Concert Software up to 1.1.0 and classified as problematic. This affects an unknown function. This manipulation causes exposure of sensitive information due to incompatible policies. The identification of this vulnerability is CVE-2024-49827. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as very critical, was found in IBM Storage Virtualize 8.4/8.5/8.6/8.7. The impacted element is an unknown function of the component SSH Session Handler. The manipulation results in incorrect authorization. This vulnerability was named CVE-2025-36120. The attack may be performed from a remote location. There is no available exploit. You should upgrade the affected component.

История технологий началась гораздо раньше.

A vulnerability marked as critical has been reported in NI Vision Builder AI. This affects an unknown function of the component VBAI File Handler. This manipulation causes product ui does not warn user of unsafe actions. The identification of this vulnerability is CVE-2025-2450. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability described as critical has been identified in NI FlexLogger. This impacts an unknown function of the component usiReg URI File Parser. Such manipulation leads to path traversal. This vulnerability is referenced as CVE-2025-2449. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in Schneider Electric Modicon M340, BMXNOR0200H Ethernet, Serial RTU Module, BMXNGD0100 M580 Global Data Module, BMXNOC0401 Modicon M340 X80 Ethernet Communication Module, BMXNOE0100 Modbus, TCP Ethernet Modicon M340 Module, BMXNOE0110 Modbus and TCP Ethernet Modicon M340 FactoryCast Module and classified as problematic. Impacted is an unknown function of the component FTP Handler. The manipulation leads to denial of service. This vulnerability is referenced as CVE-2025-6625. Remote exploitation of the attack is possible. No exploit is available. To fix this issue, it is recommended to deploy a patch.

A vulnerability was found in Schneider Electric Modicon M340, BMXNOR0200H Ethernet, Serial RTU Module, BMXNGD0100 M580 Global Data Module, BMXNOC0401 Modicon M340 X80 Ethernet Communication Module, BMXNOE0100 Modbus, TCP Ethernet Modicon M340 Module, BMXNOE0110 Modbus and TCP Ethernet Modicon M340 FactoryCast Module and classified as problematic. The affected element is an unknown function of the component FTP Handler. The manipulation results in denial of service. This vulnerability is identified as CVE-2025-6625. The attack can be executed remotely. There is not any exploit available. It is advisable to implement a patch to correct this issue.

A vulnerability marked as critical has been reported in Schneider Electric SESU up to 3.0.11. This affects an unknown part. This manipulation causes link following. This vulnerability appears as CVE-2025-5296. The attack requires local access. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in QNAP File Station 5 5.5.6.4741. This vulnerability affects unknown code. Such manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2025-47206. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in VMware Spring Framework up to 5.3.43/6.0.29/6.1.21/6.2.9. This issue affects some unknown processing of the component Servlet Container Handler. Performing manipulation results in path traversal. This vulnerability is known as CVE-2025-41242. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

Announcing the Browser Developer Program: Cloudflare’s new collaborative program to help shape Cloudflare challenges that work seamlessly with your browser. Join us today!

A more unified and behavior-aware approach to detection can significantly improve security outcomes.

A good chunk of all websites today have been affected by the biggest DDoS risk on the Web since 2023.

A vulnerability described as critical has been identified in Oracle Insurance Rules Palette 10.2.0/10.2.4/11.0.2/11.1.0/11.2.0. This issue affects some unknown processing of the component Architecture. Executing manipulation can lead to xml external entity reference. This vulnerability appears as CVE-2019-12415. The attack requires local access. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, has been found in Oracle Communications Diameter Signaling Router up to 8.2.2. The affected element is an unknown function of the component IDIH. Performing manipulation results in information disclosure. This vulnerability is cataloged as CVE-2019-12415. The attack must be initiated from a local position. There is no exploit available. It is advisable to upgrade the affected component.