Aggregator

CVE-2025-6268 | Luna Imaging up to 7.5.5.6 search q cross site scripting

VulDB Recent Entries
1 year ago
A vulnerability classified as problematic has been found in Luna Imaging up to 7.5.5.6. Affected is an unknown function of the file /luna/servlet/view/search. The manipulation of the argument q leads to cross site scripting. This vulnerability is traded as CVE-2025-6268. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-6267 | zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 barcodeDetail sql injection

VulDB Recent Entries
1 year ago
A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /adpweb/a/base/barcodeDetail/. The manipulation of the argument barcodeNo/barcode/itemNo leads to sql injection. The identification of this vulnerability is CVE-2025-6267. The attack may be initiated remotely. There is no exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-6266 | FLIR AX8 up to 1.46 /upload.php File unrestricted upload

VulDB Recent Entries
1 year ago
A vulnerability was found in FLIR AX8 up to 1.46. It has been declared as critical. This vulnerability affects unknown code of the file /upload.php. The manipulation of the argument File leads to unrestricted upload. This vulnerability was named CVE-2025-6266. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Meta Adds Passkey Login Support to Facebook for Android and iOS Users

The Hackers News
1 year ago
Meta Platforms on Wednesday announced that it's adding support for passkeys, the next-generation password standard, on Facebook. "Passkeys are a new way to verify your identity and login to your account that's easier and more secure than traditional passwords," the tech giant said in a post. Support for passkeys is expected to be available "soon" on Android and iOS mobile devices. The feature is
The Hacker News

Why AI code assistants need a security reality check

Help Net Security
1 year ago

In this Help Net Security interview, Silviu Asandei, Security Specialist and Security Governance at Sonar, discusses how AI code assistants are transforming development workflows and impacting security. He explains how these tools can boost productivity but may also propagate vulnerabilities if not properly reviewed. What security risks do AI code assistants pose that developers and organizations might overlook? While AI code assistants enhance developer productivity, they introduce significant and often overlooked security risks across multiple … More →

The post Why AI code assistants need a security reality check appeared first on Help Net Security.

Mirko Zorz

AI Security Guide: Protecting models, data, and systems from emerging threats

Security Boulevard
1 year ago

What is AI Security? AI security is where traditional cybersecurity meets the chaotic brilliance of machine learning. It’s the discipline focused on protecting AI systems—not just the code, but the training data, model logic, and output—from manipulation, theft, and misuse. Because these systems learn from data, not just logic, they open up fresh attack surfaces […]

The post AI Security Guide: Protecting models, data, and systems from emerging threats appeared first on Security Boulevard.

Mend.io Team

SCIM vs SAML: Understanding the Difference Between Provisioning and Authentication

Security Boulevard
1 year ago

Zero-trust security models are also changing how we think about identity management. The traditional approach of "authenticate once, access everything" is giving way to "authenticate constantly, verify everything." This doesn't change the basic roles of SCIM and SAML, but it does mean that these technologies need to work together more seamlessly and respond more quickly to changes.

The post SCIM vs SAML: Understanding the Difference Between Provisioning and Authentication appeared first on Security Boulevard.

Devesh Patel

Managed ad