Aggregator

A vulnerability was found in Google Android. It has been classified as critical. This affects an unknown part. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2024-40669. The attack needs to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Google Android and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to use after free. This vulnerability is handled as CVE-2024-40670. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Google Android and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to use after free. This vulnerability is known as CVE-2024-40651. Attacking locally is a requirement. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, was found in Google Android. Affected is an unknown function. The manipulation leads to use after free. This vulnerability is traded as CVE-2024-40649. Local access is required to approach this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, has been found in Google Android. This issue affects the function _DevmemXReservationPageAddress of the file devicemem_server.c. The manipulation leads to use after free. The identification of this vulnerability is CVE-2024-34748. An attack has to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in Rockwell Automation FactoryTalk View Machine Edition up to 14 on Windows. This vulnerability affects unknown code of the component Setting Handler. The manipulation leads to incorrect authorization. This vulnerability was named CVE-2025-24479. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

Series C Funding Targets Supply Chain Risks in AI, Next-Gen Infrastructure Security
Eclypsium raises $45 million in Series C funding to address emerging cyberthreats in AI workloads, GPU systems and the global supply chain. With support from Qualcomm and Ten Eleven Ventures, the company will tackle advanced cyberthreats from nation-state adversaries such as Volt Typhoon.

Author/Presenter: Justin Rhynorater Gardner

Our sincere appreciation to DEF CON, and the Authors/Presenters for publishing their erudite DEF CON 32 content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – Top War Stories From A TryHard Bug Bounty Hunter appeared first on Security Boulevard.

A vulnerability classified as problematic has been found in Google Android. This affects the function BnAudioPolicyService::onTransact of the file IAudioPolicyService.cpp. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2018-9378. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in HPE Aruba Networking Fabric Composer AFC up to 7.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-23057. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in HPE Aruba Networking Fabric Composer AFC up to 7.1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Management Interface. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-23056. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in HPE Aruba Networking Fabric Composer AFC up to 7.1.0. It has been classified as problematic. Affected is an unknown function of the component Web Management Interface. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-23055. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Google Android and classified as problematic. This issue affects the function DevmemXIntMapPages of the file devicemem_server.c. The manipulation leads to integer overflow. The identification of this vulnerability is CVE-2024-34733. The attack needs to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Google Android and classified as problematic. This vulnerability affects the function RGXMMUCacheInvalidate of the file rgxmem.c. The manipulation leads to race condition. This vulnerability was named CVE-2024-34732. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.

As with just about every part of business today, cybersecurity has been awash in the promises of what AI can do for its tools and processes. In fact, cybersecurity vendors have touted the power of algorithmic detection and response for years.

The post AI is a double-edged sword: Why you need new controls to manage risk appeared first on Security Boulevard.

A vulnerability, which was classified as critical, was found in HPE Aruba Networking Fabric Composer AFC up to 7.1.0. This affects an unknown part of the component Web-based Management Interface. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2025-23054. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Red Hat OpenShift GitOps. Affected by this issue is some unknown functionality of the component ArgoCD. The manipulation leads to exposure of resource. This vulnerability is handled as CVE-2024-13484. Local access is required to approach this attack. There is no exploit available.

A vulnerability classified as critical was found in Rockwell Automation 1756-L8zS3 and 1756-L3zS3 33.011/33.012/33.015/34.011/35.011. Affected by this vulnerability is an unknown functionality of the component Request Handler. The manipulation leads to handling of exceptional conditions. This vulnerability is known as CVE-2025-24478. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in Google Android. Affected is the function TdlsexRxFrameHandle of the component MTK WLAN Driver. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2018-9373. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Rockwell Automation FactoryTalk View Machine Edition up to 14. It has been rated as very critical. This issue affects some unknown processing. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2025-24480. The attack may be initiated remotely. There is no exploit available.