Aggregator

A bipartisan congressional duo introduced legislation that would beef up cybersecurity protections at the Securities and Exchange Commission.

An international effort sanctioned Russia-based Media Land and took action against companies and people who helped Aeza Group evade previously issued sanctions.

The post Five Eyes just made life harder for bulletproof hosting providers appeared first on CyberScoop.

Currently trending CVE - Hype Score: 1 - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 stores NIM private keys used in NIM environments in an insecure way which is susceptible to unauthorized access by an attacker using man in the middle techniques.

Currently trending CVE - Hype Score: 1 - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls. This addresses additional attack vectors for a vulnerability that was previously addressed in ...

Currently trending CVE - Hype Score: 1 - IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to execute arbitrary commands due to improper process controls.  This addresses additional attack vectors for a vulnerability that was ...

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Google Chromium V8 flaw, tracked as CVE-2025-13223, to its Known Exploited Vulnerabilities (KEV) catalog. This week, Google released Chrome security updates to address two flaws, including a high-severity V8 type confusion […]

详解LOLBAS特性，利用系统自带的合法功能来实施隐蔽操作

A vulnerability has been found in Linux Kernel up to 6.1.1 and classified as critical. Affected is the function kmalloc_node_trace. The manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2022-50434. The attack can only be initiated within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.10.149/5.15.74/5.19.16/6.0.2. This impacts the function of_lpddr3_get_ddr_timings of the component memory. Executing manipulation can lead to improper update of reference count. This vulnerability is handled as CVE-2022-50429. The attack can only be done within the local network. There is not any exploit available. You should upgrade the affected component.

Google's Gemini 3 is finally here, and we're impressed with the results, but it still does not adhere to my requests as well as Claude Code. [...]

A vulnerability described as problematic has been identified in FileCodeBox up to 2.2. Impacted is an unknown function. The manipulation results in cross site scripting. This vulnerability is known as CVE-2025-51662. It is possible to launch the attack remotely. No exploit is available.

A vulnerability marked as critical has been reported in Bridgetech VBC Server & Element Manager 6.5.0-9/6.5.0-10. This issue affects some unknown processing. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2025-63214. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability labeled as critical has been found in FileCodeBox up to 2.2. This vulnerability affects the function SystemFileStorage.save_file of the file core/storage.py of the component POST Handler. Executing manipulation can lead to path traversal. This vulnerability appears as CVE-2025-51661. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as problematic has been detected in GatesAir Flexiva-LX 1.0.13/2.0. This affects an unknown part of the file /log/Flexiva%20LX.log. Performing manipulation results in sensitive information in log files. This vulnerability is reported as CVE-2025-63212. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in D-Link DIR-868L FW106KRb01. Affected by this issue is some unknown functionality of the component HNAP Service. Such manipulation of the argument SOAPAction leads to os command injection. This vulnerability is documented as CVE-2025-63932. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in QVidium Opera11 2.9.0-Ax4x. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/net_ping.cgi of the component GET Handler. This manipulation causes command injection. This vulnerability is registered as CVE-2025-63213. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability was found in IBM i 7.2/7.3/7.4/7.5/7.6. It has been declared as problematic. Affected is an unknown function. The manipulation results in use of get request method with sensitive query strings. This vulnerability is cataloged as CVE-2025-36371. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.