Aggregator

A vulnerability marked as problematic has been reported in IBM AIX and VIOS. This issue affects some unknown processing of the component NIM Environments. This manipulation causes insufficiently protected credentials. This vulnerability appears as CVE-2025-36096. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. It has been rated as critical. This issue affects the function soapcgi_main of the file /soap.cgi. This manipulation causes stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. The identification of this vulnerability is CVE-2025-13191. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability labeled as critical has been found in code-projects Email Logging Interface 2.0. Affected is an unknown function of the file signup.cpp. The manipulation of the argument Username results in path traversal: '../filedir'. This vulnerability is identified as CVE-2025-13199. The attack is only possible with local access. Additionally, an exploit exists.

A vulnerability classified as problematic has been found in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /add_to_cart. Performing manipulation of the argument product_name results in cross site scripting. This vulnerability is cataloged as CVE-2025-13202. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability identified as critical has been detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. This vulnerability is known as CVE-2025-13240. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability marked as critical has been reported in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2025-13242. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability described as critical has been identified in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation results in sql injection. This vulnerability was named CVE-2025-13243. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 18.3.5/18.4.3/18.5.1. It has been rated as problematic. This vulnerability affects unknown code of the component OAuth. Performing manipulation results in incorrect authorization. This vulnerability is reported as CVE-2025-7736. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

Вы даже не поймёте, в какой момент потеряли контроль над своим устройством.

经公安部计算机信息系统安全产品质量监督检验中心检测，40款移动应用存在违法违规收集使用个人信息情况。

此类finger命令滥用活动似乎由单一威胁者发起，且主要通过ClickFix攻击实施。但鉴于仍有用户持续上当，相关攻击活动需引起高度警惕。

2025网络安全“金帽子”年度评选活动已进入投票阶段，截止时间为11月28日中午12:00。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

Privacy rules like GDPR and CCPA are meant to help app stores be clearer about how apps use your data. But in the Google Play Store, those privacy sections often leave people scratching their heads. A new study looks at how users read these parts of an app listing and how their reactions affect the risks they believe they are taking. The study setup The researchers built a controlled web environment that mimicked the Google … More →

The post Google Play Store’s privacy practices still confuse Android users appeared first on Help Net Security.

When AI models generate code, they deliver power and risk at the same time for security teams. That tension is at the heart of the new tool called BlueCodeAgent, designed to help developers and security engineers defend against code-generation threats. Why code generation raises concern LLMs are increasingly used in software development for tasks like generating functions, scripts and APIs. But these systems can expose an organization to new risks. A Microsoft blog post explains … More →

The post BlueCodeAgent helps developers secure AI-generated code appeared first on Help Net Security.

A vulnerability described as problematic has been identified in Grafana Databricks Datasource Plugin up to 1.12.0. Affected is an unknown function of the component Oauth Passthrough. Such manipulation leads to improper isolation or compartmentalization. This vulnerability is listed as CVE-2025-41116. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability, which was classified as problematic, has been found in Zoom Workplace and Meeting SDK 6.4.5/6.4.13. The affected element is an unknown function. This manipulation causes inefficient regular expression complexity. This vulnerability appears as CVE-2025-62484. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

OpenAI is partnering with DoorDash, SCORE, and local organizations to help 1,000 small businesses build with AI. The Small Business AI Jam gives Main Street business owners hands-on tools and training to compete and grow.