Aggregator

CVE-2025-1246 | ARM Bifrost GPU Userspace Driver up to r49p3/r51p0 memory corruption

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability classified as critical was found in ARM Bifrost GPU Userspace Driver, Valhall GPU Userspace Driver and 5th Gen GPU Architecture Userspace Driver up to r49p3/r51p0. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is known as CVE-2025-1246. Local access is required to approach this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2009-2836 | Apple Mac OS X up to 10.6.0 Password Authentication race condition (Nessus ID 42434 / ID 116692)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in Apple Mac OS X up to 10.6.0. It has been rated as critical. This issue affects some unknown processing of the component Password Authentication. The manipulation leads to race condition. The identification of this vulnerability is CVE-2009-2836. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2009-2833 | Apple Mac OS X 10.5.8 International Components for Unicode memory corruption (Nessus ID 42433 / ID 116692)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in Apple Mac OS X 10.5.8 and classified as critical. Affected by this issue is some unknown functionality of the component International Components for Unicode. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2009-2833. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2009-2834 | Apple Mac OS X up to 10.3 Bluetooth access control (Nessus ID 42434 / ID 116692)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in Apple Mac OS X up to 10.3. It has been classified as problematic. This affects an unknown part of the component Bluetooth. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2009-2834. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2009-2830 | Apple Mac OS X up to 10.6.0 memory corruption (Nessus ID 42434 / ID 116692)

Vuldb Updates
8 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in Apple Mac OS X up to 10.6.0. This issue affects some unknown processing. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2009-2830. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2015-5465 | Silicon Integrated Systems WindowsXP Display Manager 6.14.10.3930 IOCTL Call 0x96002400/0x96002404 write-what-where condition (ID 133399 / EDB-38054)

Vuldb Updates
8 months 3 weeks ago
A vulnerability classified as problematic has been found in Silicon Integrated Systems WindowsXP Display Manager 6.14.10.3930. Affected is an unknown function of the component IOCTL Call Handler. The manipulation of the argument 0x96002400/0x96002404 leads to write-what-where condition. This vulnerability is traded as CVE-2015-5465. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.
vuldb.com

New Study Uncovers Vulnerable Code Pattern Exposes GitHub Projects To Path Traversal Attacks

Cyber Security News
8 months 3 weeks ago

A comprehensive security research study has revealed a widespread vulnerable code pattern affecting thousands of open-source projects on GitHub, exposing them to critical path traversal attacks that could allow malicious actors to access sensitive files and crash server systems. The vulnerability, classified as CWE-22, enables attackers to bypass intended directory restrictions and access files outside […]

The post New Study Uncovers Vulnerable Code Pattern Exposes GitHub Projects To Path Traversal Attacks appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2009-1467 | IceWarp eMail Server up to 7.4.1 getHTML cross site scripting (EDB-32969 / Nessus ID 38717)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in IceWarp eMail Server up to 7.4.1. It has been classified as problematic. This affects the function getHTML. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2009-1467. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Haozi’s Plug-and-Play Phishing Attack Steals Over $280,000 From Users

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
8 months 3 weeks ago

Netcraft security researchers have identified a significant resurgence of the Chinese-language Haozi Phishing-as-a-Service (PhaaS) operation, distinguished by its cartoon mouse mascot and frictionless cybercrime toolkit. The group’s cryptocurrency wallet has processed over $280,000, with substantial recent withdrawals, while thousands of their administration panels have been detected across the internet. What makes Haozi particularly dangerous is […]

The post Haozi’s Plug-and-Play Phishing Attack Steals Over $280,000 From Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

CVE-2018-17380 | Article Factory Manager 4.3.9 on Joomla start_date/m_start_date/m_end_date sql injection (File 149533/Joo / EDB-45477)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in Article Factory Manager 4.3.9 on Joomla. It has been classified as critical. Affected is an unknown function. The manipulation of the argument start_date/m_start_date/m_end_date as part of Parameter leads to sql injection. This vulnerability is traded as CVE-2018-17380. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

⚡ Weekly Recap: APT Intrusions, AI Malware, Zero-Click Exploits, Browser Hijacks and More

The Hackers News
8 months 3 weeks ago
If this had been a security drill, someone would’ve said it went too far. But it wasn’t a drill—it was real. The access? Everything looked normal. The tools? Easy to find. The detection? Came too late. This is how attacks happen now—quiet, convincing, and fast. Defenders aren’t just chasing hackers anymore—they’re struggling to trust what their systems are telling them. The problem isn’t too
The Hacker News

CVE-2007-4079 | AlstraSoft SMS Text Messaging Enterprise admin/edituser.php userid cross site scripting (EDB-30368 / BID-25022)

Vuldb Updates
8 months 3 weeks ago
A vulnerability, which was classified as problematic, was found in AlstraSoft SMS Text Messaging Enterprise. Affected is an unknown function of the file admin/edituser.php. The manipulation of the argument userid leads to basic cross site scripting. This vulnerability is traded as CVE-2007-4079. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad