Aggregator

A vulnerability classified as critical was found in Online Banking System 1.0. Affected by this vulnerability is an unknown functionality of the file /net-banking/edit_customer_action.php. The manipulation of the argument cust_id leads to sql injection. This vulnerability is known as CVE-2022-40122. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in vim and classified as critical. This issue affects some unknown processing. The manipulation leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2022-3296. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A Chinese-speaking threat actor tracked as UAT-6382 has been linked to the exploitation of a now-patched remote-code-execution vulnerability in Trimble Cityworks to deliver Cobalt Strike and VShell. "UAT-6382 successfully exploited CVE-2025-0944, conducted reconnaissance, and rapidly deployed a variety of web shells and custom-made malware to maintain long-term access," Cisco Talos researchers

Gujarat Anti-Terrorism Squad (ATS) has apprehended two individuals, including a minor, for orchestrating a series of sophisticated cyber attacks against Indian websites and disseminating anti-national content online. The arrests came as part of “Operation Sindoor,” a targeted cybersecurity initiative that identified over 50 attacks on critical digital infrastructure. The suspects, who demonstrated advanced technical proficiency […]

The post Gujarat Teen Arrested for Orchestrating Over 50 Cyberattacks in ‘Operation Sindoor’ appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

То, что считали невозможным с 70-х, внезапно оказалось возможным. Просто никто не смотрел с этой стороны.

Cyberaanvallen zijn inmiddels niet meer weg te denken uit de maatschappij. Of het nu gaat om de haven van Rotterdam, een ziekenhuis of een defensielocatie. De aanvallen hebben inmiddels op iedereen impact. Europa moet zich op het gebied van cybersecurity daarom nadrukkelijk roeren, vindt minister Ruben Brekelmans.

Author/Presenter: Cecilie Wian

Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.

Permalink

The post BSidesLV24 – PasswordsCon – Picking A Fight With The Banks appeared first on Security Boulevard.

The legislation Sens. Gary Peters and James Lankford would create an executive branch panel to align federal cyber rules.

The post Senators revive bill to harmonize conflicting cybersecurity regulations appeared first on CyberScoop.

Kettering Health is facing significant disruptions from a cyber-attack that impacted patient care

A vulnerability, which was classified as critical, has been found in Infoblox NETMRI up to 7.6.0. Affected by this issue is some unknown functionality. The manipulation leads to sql injection. This vulnerability is handled as CVE-2025-32814. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Transform your B2B SaaS growth trajectory with 10 battle-tested strategies derived from business classics and proven by market leaders. Learn how these frameworks can be specifically adapted for AI startups, with actionable tactics that drive sustainable revenue growth in competitive landscape.

The post 10 Proven Growth Strategies for B2B SaaS: Lessons from Business Classics & Applications for AI Startups appeared first on Security Boulevard.

A vulnerability classified as problematic was found in GNOME gnome-remote-desktop. Affected by this vulnerability is an unknown functionality of the component RDP PDU Handler. The manipulation leads to resource consumption. This vulnerability is known as CVE-2025-5024. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in Infoblox NETMRI up to 7.6.0. Affected is an unknown function. The manipulation leads to hard-coded credentials. This vulnerability is traded as CVE-2025-32815. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Infoblox NETMRI up to 7.6.0. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to command injection. The identification of this vulnerability is CVE-2025-32813. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Infoblox NETMRI up to 7.6.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to information disclosure. This vulnerability was named CVE-2024-54188. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 17.10.6/17.11.2/18.0.0. It has been classified as problematic. This affects an unknown part of the component Email Address Handler. The manipulation leads to exposure of private personal information to an unauthorized actor. This vulnerability is uniquely identified as CVE-2025-0679. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 17.10.6/17.11.2/18.0.0 and classified as problematic. Affected by this issue is some unknown functionality of the component SAML Response Handler. The manipulation leads to improper validation of consistency within input. This vulnerability is handled as CVE-2024-12093. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in GitLab Community Edition and Enterprise Edition up to 17.10.6/17.11.2/18.0.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Two-Factor Authentication Requirements. The manipulation leads to weak authentication. This vulnerability is known as CVE-2025-0605. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.