Aggregator

Google Chrome Zero-Day CVE-2025-2783 Exploited by TaxOff to Deploy Trinper Backdoor

The Hackers News
8 months 2 weeks ago
A now-patched security flaw in Google Chrome was exploited as a zero-day by a threat actor known as TaxOff to deploy a backdoor codenamed Trinper. The attack, observed in mid-March 2025 by Positive Technologies, involved the use of a sandbox escape vulnerability tracked as CVE-2025-2783 (CVSS score: 8.3). Google addressed the flaw later that month after Kaspersky reported in-the-wild
The Hacker News

CVE-2025-6192 | Google Chrome up to 136.0.7103.113 Profiler use after free (Nessus ID 240119)

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability was found in Google Chrome. It has been classified as critical. This affects an unknown part of the component Profiler. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2025-6192. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-6191 | Google Chrome 2025-05-27 V8 integer overflow (Nessus ID 240119)

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability was found in Google Chrome 2025-05-27 and classified as critical. Affected by this issue is some unknown functionality of the component V8. The manipulation leads to integer overflow. This vulnerability is handled as CVE-2025-6191. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-49154 | Trend Micro Apex One access control

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability has been found in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper access controls. This vulnerability is known as CVE-2025-49154. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-34510 | Sitecore Experience Manager up to 9.3/10.4 path traversal (EUVD-2025-18525)

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability classified as critical has been found in Sitecore Experience Manager, Experience Platform and Experience Commerce up to 9.3/10.4. This affects an unknown part. The manipulation leads to relative path traversal. This vulnerability is uniquely identified as CVE-2025-34510. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-34509 | Sitecore Experience Manager/Experience Platform 10.1.4/10.3.3/10.4.1 Administrative API hard-coded credentials (EUVD-2025-18524)

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability was found in Sitecore Experience Manager and Experience Platform 10.1.4/10.3.3/10.4.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Administrative API. The manipulation leads to hard-coded credentials. This vulnerability is handled as CVE-2025-34509. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-33122 | IBM i 7.2/7.3/7.4/7.5/7.6 Advanced Job Scheduler uncontrolled search path

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability was found in IBM i 7.2/7.3/7.4/7.5/7.6 and classified as critical. This issue affects some unknown processing of the component Advanced Job Scheduler. The manipulation leads to uncontrolled search path. The identification of this vulnerability is CVE-2025-33122. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

LinuxFest Northwest: Challenges of Managing Community Meetup Post-Pandemic

Security Boulevard
8 months 2 weeks ago

Author/Presenter: Mariatta Wijaya (Python Core Developer)

Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College in Bellingham, Washington; and via the organizations YouTube channel.

Thanks and a Tip O' The Hat to Verification Labs :: Penetration Testing Specialists :: Trey Blalock GCTI, GWAPT, GCFA, GPEN, GPCS, GCPN, CRISC, CISA, CISM, CISSP, SSCP, CDPSE for recommending and appearing as speaker at the LinuxFest Northwest conference.

Permalink

The post LinuxFest Northwest: Challenges of Managing Community Meetup Post-Pandemic appeared first on Security Boulevard.

Marc Handelman

Managed ad