Aggregator

Cybersecurity News Weekly Newsletter – 29.7 Tbps DDoS Attack, Chrome 143, React2Shell Vulnerabilities, and Cloudflare Outage

Cyber Security News
1 month 1 week ago

This week’s cybersecurity landscape featured a record-breaking 29.7 Tbps DDoS attack on a financial institution, leveraging IoT botnets and UDP floods that overwhelmed European networks until mitigated via BGP blackholing by Cloudflare and Akamai, highlighting the need for 5G device segmentation. Google released Chrome 143, patching 12 high-severity flaws, including three actively exploited zero-days (CVE-2025-1234, […]

The post Cybersecurity News Weekly Newsletter – 29.7 Tbps DDoS Attack, Chrome 143, React2Shell Vulnerabilities, and Cloudflare Outage appeared first on Cyber Security News.

Guru Baran

CVE-2023-28713 | CONPROSYS HMI System up to 3.5.2 missing encryption (EUVD-2023-32351)

Vuldb Updates
1 month 1 week ago
A vulnerability, which was classified as problematic, has been found in CONPROSYS HMI System up to 3.5.2. The impacted element is an unknown function. This manipulation causes missing encryption of sensitive data. This vulnerability appears as CVE-2023-28713. The attack requires local access. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-14188 | UGREEN DH2100+ up to 5.3.0.251125 nas_svr /v1/file/backup/create handler_file_backup_create path command injection (EUVD-2025-201598)

Vuldb Updates
1 month 1 week ago
A vulnerability was found in UGREEN DH2100+ up to 5.3.0.251125. It has been rated as critical. This impacts the function handler_file_backup_create of the file /v1/file/backup/create of the component nas_svr. The manipulation of the argument path leads to command injection. This vulnerability is uniquely identified as CVE-2025-14188. The attack is possible to be carried out remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-14189 | Chanjet CRM up to 20251121 jxf_dump_table_demo.php gblOrgID sql injection (EUVD-2025-201600)

Vuldb Updates
1 month 1 week ago
A vulnerability categorized as critical has been discovered in Chanjet CRM up to 20251121. Affected is an unknown function of the file /tools/jxf_dump_table_demo.php. The manipulation of the argument gblOrgID results in sql injection. This vulnerability was named CVE-2025-14189. The attack may be performed from remote. In addition, an exploit is available. Applying restrictive firewalling is recommended. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-14190 | Chanjet TPlus up to 20251121 currentAccId sql injection (EUVD-2025-201599)

Vuldb Updates
1 month 1 week ago
A vulnerability identified as critical has been detected in Chanjet TPlus up to 20251121. Affected by this vulnerability is an unknown functionality of the file /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController,Ufida.T.SM.UIP.ashx?method=Load. This manipulation of the argument currentAccId causes sql injection. The identification of this vulnerability is CVE-2025-14190. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is advisable to implement restrictive firewalling. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Jolla 新 Linux 手机开放预购

Solidot
1 month 1 week ago
芬兰公司 Jolla 创办于 14 年前。在诺基亚放弃其 Linux 移动操作系统 MeeGo 之后，前员工在 MeeGo 基础上开发了 Sailfish OS。Jolla 在 2013 年通过众筹发布了它的第一款智能手机，但最近几年该公司主要专注于开发 Sailfish OS，业务主要是将其软件授权提供给其它智能手机厂商，如索尼 Xperia 和一加、三星等。现在 Jolla 的新款 Linux 手机已经开放预购。预购页面显示预购量在 2026 年 1 月 4 日前达到 2000 部才会投产，2026 年上半年交付。目前预购已经超过 2100 部，因此这不再是问题。新手机搭载了联发科的 5G SoC，配备 12GB 内存，256GB 存储空间，可扩展至 2TB，显示屏是 6.36 英寸 FullHD AMOLED，像素密度 390ppi，可更换的 5500mAh 电池。预购 折扣价为 499 欧元，比原价便宜 99 欧元。手机配备了用户可配置的物理隐私开关，允许关闭麦克风、蓝牙、Android 应用或其它任何功能。手机操作系统将提供至少五年的更新，承诺不会跟踪用户。首批销售市场包括欧盟、英国、瑞士和挪威。

Managed ad