Aggregator

A vulnerability was found in Andrew Charlton My Category Order up to 2.6.1a and classified as critical. Affected is an unknown function of the file mycategoryorder.php. The manipulation of the argument parentID results in sql injection. This vulnerability is reported as CVE-2009-4748. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in Phplivesupport Php Live! 3.2.2. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the file message_box.php. This manipulation causes sql injection. This vulnerability appears as CVE-2009-4749. The attack may be initiated remotely. In addition, an exploit is available.

Агентство откладывает высадку на поверхность, чтобы проверить SpaceX и Blue Origin на орбите. Ну-ну…

关键词入侵多个官方 SAP npm 软件包疑似遭 TeamPCP 供应链攻击，被入侵后用于窃取开发者系统中的凭

关键词个人信息9人假借招聘骗走大量个人信息 非法贩卖信息获利数十万！前不久，甘肃兰州警方破获了一起非法获取和出售公民个人信息的案件。

AI 漏洞挖掘开始交付"工程化结果" 从音频解码到工业 CAD，从车端 CAN 帧到企业 Java 中间件——这一次，AI 红队没有靠"灵感"。

昨天的文章《警惕，最新LINUX漏洞》中，给大家提醒了最近的CVE-2026-31431漏洞，怎么才能检测到利用该漏洞进行的攻击呢？

A vulnerability identified as problematic has been detected in SkaDate Online Dating Software. Affected by this issue is some unknown functionality of the file index.php. Performing a manipulation of the argument language_id results in code injection. This vulnerability was named CVE-2009-4739. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability marked as problematic has been reported in OpenSSL up to 0.9.8m. Impacted is an unknown function of the file ssl/s3_pkt.c of the component TLS Connection Handler. This manipulation causes null pointer dereference. This vulnerability is handled as CVE-2010-0740. The attack can be initiated remotely. Additionally, an exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Pulse CMS up to 1.18. It has been classified as critical. This affects an unknown function of the file includes/login.php of the component Login. The manipulation leads to code injection. This vulnerability is traded as CVE-2010-0988. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Pulse CMS up to 1.18. It has been declared as problematic. This impacts an unknown function of the file delete.php. The manipulation of the argument f results in path traversal. This vulnerability is known as CVE-2010-0989. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in MIT Kerberos 5-1.7/5-1.7.1/5-1.8. This vulnerability affects the function spnego_gss_accept_sec_context in the library lib/gssapi/spnego/spnego_mech.c of the component Kerberos. The manipulation results in denial of service. This vulnerability is cataloged as CVE-2010-0628. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 3.5.5. This issue affects some unknown processing. This manipulation causes memory corruption. This vulnerability is registered as CVE-2010-1122. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as problematic, was found in Alkacon OAMP Comments 1.0.1. Impacted is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2009-4505. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in Chip Salzenberg Deliver 2.1.14 and classified as problematic. The affected element is an unknown function. Performing a manipulation results in link following. This vulnerability is reported as CVE-2010-0439. The attack requires a local approach. No exploit exists.

A vulnerability was found in gnu gnutls and classified as critical. The impacted element is the function gnutls_x509_crt_get_serial. Executing a manipulation can lead to memory corruption. This vulnerability appears as CVE-2010-0731. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability was found in Chip Salzenberg Deliver 2.1.14. It has been rated as problematic. Affected is an unknown function. This manipulation causes race condition. This vulnerability is handled as CVE-2010-1123. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability categorized as problematic has been discovered in IBM AIX 5.3/5.3.0. Affected by this vulnerability is the function getaddrinfo in the library bos.rte.libc. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2010-1124. The attack can be launched remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in Apple Mac OS X. This impacts an unknown function. Such manipulation leads to improper input validation. This vulnerability is documented as CVE-2010-0740. The attack can be executed remotely. Additionally, an exploit exists. It is advisable to upgrade the affected component.

Small business owners should be sure to fix these three non-technical risks that require little cybersecurity expertise.

The post 3 easy-to-miss cybersecurity risks for small businesses appeared first on Security Boulevard.