Aggregator

U.S. CISA adds SonicWall SMA100 and Apache HTTP Server flaws to its Known Exploited Vulnerabilities catalog

Security Affairs
9 months 1 week ago
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall SMA100 and Apache HTTP Server flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the descriptions for these flaws: […]
Pierluigi Paganini

CVE-2025-3514 | SureForms Plugin up to 1.4.3 on WordPress Form Setting cross site scripting

VulDB Recent Entries
9 months 1 week ago
A vulnerability, which was classified as problematic, was found in SureForms Plugin up to 1.4.3 on WordPress. This affects an unknown part of the component Form Setting Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-3514. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-3513 | SureForms Plugin up to 1.4.3 on WordPress Form Setting cross site scripting

VulDB Recent Entries
9 months 1 week ago
A vulnerability, which was classified as problematic, has been found in SureForms Plugin up to 1.4.3 on WordPress. Affected by this issue is some unknown functionality of the component Form Setting Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-3513. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Opsera improves GitHub security management

Help Net Security
9 months 1 week ago

Opsera announced new Advanced Security Dashboard capabilities that, available as an extension of Opsera’s Unified Insights for GitHub Copilot, help enterprises maximize the benefits of GitHub Advanced Security (GHAS). Opsera now connects and provides a comprehensive view of security alongside software development performance, enabling the monitoring of vulnerabilities, tracking of remediation, and fostering a stronger security culture across development teams, all without slowing down software delivery. “Our Advanced Security Dashboard complements our existing GitHub solutions … More →

The post Opsera improves GitHub security management appeared first on Help Net Security.

Industry News

CISA Issues New ICS Advisories Addressing Critical Vulnerabilities and Exploits

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
9 months 1 week ago

The Cybersecurity and Infrastructure Security Agency (CISA) has issued two new advisories revealing critical vulnerabilities found in widely used Industrial Control Systems (ICS). Released on May 1, 2025, the advisories spotlight severe security risks affecting KUNBUS GmbH’s Revolution Pi devices and the MicroDicom DICOM Viewer, with some vulnerabilities scoring the highest possible rating for risk […]

The post CISA Issues New ICS Advisories Addressing Critical Vulnerabilities and Exploits appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

NVIDIA TensorRT-LLM Vulnerability Let Hackers Run Malicious Code

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
9 months 1 week ago

NVIDIA has issued an urgent security advisory after discovering a significant vulnerability (CVE-2025-23254) in its popular TensorRT-LLM framework, urging all users to update to the latest version (0.18.2) to safeguard their systems against potential attacks. Overview of the Vulnerability The vulnerability, identified as CVE-2025-23254, affects all versions of the NVIDIA TensorRT-LLM framework before 0.18.2 across […]

The post NVIDIA TensorRT-LLM Vulnerability Let Hackers Run Malicious Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Microsoft Sets Passkeys Default for New Accounts; 15 Billion Users Gain Passwordless Support

The Hackers News
9 months 1 week ago
A year after Microsoft announced passkeys support for consumer accounts, the tech giant has announced a big change that pushes individuals signing up for new accounts to use the phishing-resistant authentication method by default. "Brand new Microsoft accounts will now be 'passwordless by default,'" Microsoft's Joy Chik and Vasu Jakkal said. "New users will have several passwordless options for
The Hacker News

The Have I Been Pwned Alpine Grand Tour

Troy Hunt
9 months 1 week ago

I love a good road trip. Always have, but particularly during COVID when international options were somewhat limited, one road trip ended up, well, "extensive". I also love the recent trips Charlotte and I have taken to spend time with many of the great agencies we've

Troy Hunt

Anviz unveils biometric access control solution

Help Net Security
9 months 1 week ago

Anviz launched W2 Face, its latest hybrid biometric access control and attendance terminal. Designed to meet the needs of modern enterprises, the W2 Face combines facial recognition, fingerprint authentication, and RFID capabilities in a compact, intelligent device. Responding to market evolution As the access control landscape shifts toward integrated multi-biometric solutions, businesses increasingly seek systems that enhance security and operational efficiency. Market analysis conducted by Anviz has revealed key trends driving this demand: A growing … More →

The post Anviz unveils biometric access control solution appeared first on Help Net Security.

Industry News

Managed ad