Philippine military company spied upon with new China-linked malware
Cybersecurity researchers examining an intrusion into the network of a Philippine military company found a "new and advanced malware toolset" that they linked to China.
Aggregator
DEF CON 2025: The Modern Rogue Presents Speedrun with Josh Nass!
9 months 2 weeks ago
Creators, Authors and Presenters: The Modern Rogue (@ModernRogue) Presents Josh Nass (@HamRadioCrashCourse)
Our sincere appreciation to DEF CON, and the Creators/Presenters/Authors for publishing their timely DEF CON 33 outstanding content. Originating from the conference's events located at the Las Vegas Convention Center; and via the organizations YouTube channel.
The post DEF CON 2025: The Modern Rogue Presents Speedrun with Josh Nass! appeared first on Security Boulevard.
Marc Handelman
DHS inspector general: CISA mismanaged multimillion-dollar employee incentives program
9 months 2 weeks ago
Auditors examined CISA's Cybersecurity Retention Incentive program and found that the agency did not “properly design, implement, comply with or manage” requirements for it.
CISA Lays Out Roadmap for CVE Program’s ‘Quality Era’
9 months 2 weeks ago
Five months after the future of the CVE program was thrown in doubt, CISA this week released a roadmap that calls for steps to take for its new "quality era," which includes public sponsorship, expanded public-private partnership, and modernization.
The post CISA Lays Out Roadmap for CVE Program’s ‘Quality Era’ appeared first on Security Boulevard.
Jeffrey Burt
Оружие — мем, штаб — сервер. Непальская молодежь свергла правительство и выбрала нового лидера, не выходя из чата
9 months 2 weeks ago
Крупнейшее сообщество Discord в Непале превратилось в цифровой парламент.
Akira
9 months 2 weeks ago
You must login to view this content
cohenido
Microsoft Edge security advisory (AV25-588)
9 months 2 weeks ago
Canadian Centre for Cyber Security
Threat Intelligence Analytics
9 months 2 weeks ago
Threat Intelligence Analytics
Dark Web Informer
CVE-2025-55145 | Ivanti Connect Secure authorization (EUVD-2025-27418 / Nessus ID 264601)
9 months 2 weeks ago
A vulnerability described as critical has been identified in Ivanti Connect Secure, Policy Secure, ZTA Gateway and Neurons for Secure Access. This vulnerability affects unknown code. Such manipulation leads to missing authorization.
This vulnerability is documented as CVE-2025-55145. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.
vuldb.com
CVE-2025-55141 | Ivanti Connect Secure Setting authorization (EUVD-2025-27284 / Nessus ID 264601)
9 months 2 weeks ago
A vulnerability was found in Ivanti Connect Secure, Policy Secure, ZTA Gateway and Neurons for Secure Access. It has been rated as critical. Affected by this issue is some unknown functionality of the component Setting Handler. The manipulation leads to missing authorization.
This vulnerability is referenced as CVE-2025-55141. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is advised.
vuldb.com
CVE-2025-55147 | Ivanti Connect Secure cross-site request forgery (EUVD-2025-27287 / Nessus ID 264601)
9 months 2 weeks ago
A vulnerability labeled as problematic has been found in Ivanti Connect Secure, Policy Secure, ZTA Gateway and Neurons for Secure Access. This issue affects some unknown processing. Such manipulation leads to cross-site request forgery.
This vulnerability is listed as CVE-2025-55147. The attack may be performed from remote. There is no available exploit.
The affected component should be upgraded.
vuldb.com
Противник Джобса и отец «Макинтоша». Как Джеф Раскин пытался создать по-настоящему «человечный» компьютер — и почему у него не получилось.
9 months 2 weeks ago
Единое рабочее пространство против хаоса окон — битва, которую мы проиграли.
CVE-2025-54906 | Microsoft Office use after free (Nessus ID 261816)
9 months 2 weeks ago
A vulnerability has been found in Microsoft Office and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to use after free.
This vulnerability is documented as CVE-2025-54906. The attack can be initiated remotely. There is not any exploit available.
To fix this issue, it is recommended to deploy a patch.
vuldb.com
CVE-2025-54907 | Microsoft Visio heap-based overflow
9 months 2 weeks ago
A vulnerability was found in Microsoft Visio and classified as critical. This affects an unknown part. The manipulation results in heap-based buffer overflow.
This vulnerability is reported as CVE-2025-54907. The attack can be launched remotely. No exploit exists.
It is advisable to implement a patch to correct this issue.
vuldb.com
CVE-2025-54908 | Microsoft PowerPoint use after free (EUVD-2025-27349 / Nessus ID 264567)
9 months 2 weeks ago
A vulnerability was found in Microsoft PowerPoint. It has been classified as critical. This vulnerability affects unknown code. This manipulation causes use after free.
This vulnerability appears as CVE-2025-54908. The attack may be initiated remotely. There is no available exploit.
Applying a patch is the recommended action to fix this issue.
vuldb.com
CVE-2025-54919 | Microsoft Windows up to Server 2025 Graphics race condition
9 months 2 weeks ago
A vulnerability classified as problematic was found in Microsoft Windows. Affected by this issue is some unknown functionality of the component Graphics. Executing manipulation can lead to race condition.
This vulnerability is tracked as CVE-2025-54919. The attack can be launched remotely. No exploit exists.
It is best practice to apply a patch to resolve this issue.
vuldb.com
CVE-2025-47997 | Microsoft SQL Server information disclosure (Nessus ID 261809)
9 months 2 weeks ago
A vulnerability was found in Microsoft SQL Server and classified as problematic. Affected by this issue is some unknown functionality. Executing manipulation can lead to information disclosure.
This vulnerability is handled as CVE-2025-47997. The attack can be executed remotely. There is not any exploit available.
It is advisable to implement a patch to correct this issue.
vuldb.com
CVE-2025-54789 | humhub cfiles up to 0.6.9 cross site scripting (GHSA-cw2v-c62w-5r43 / EUVD-2025-23404)
9 months 2 weeks ago
A vulnerability marked as problematic has been reported in humhub cfiles up to 0.6.9. Affected is an unknown function. The manipulation leads to basic cross site scripting.
This vulnerability is documented as CVE-2025-54789. The attack can be initiated remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2025-54833 | OPEXUS FOIAXpress Public Access Link 11.1.0 CAPTCHA excessive authentication (EUVD-2025-23291)
9 months 2 weeks ago
A vulnerability was found in OPEXUS FOIAXpress Public Access Link 11.1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component CAPTCHA Handler. The manipulation results in improper restriction of excessive authentication attempts.
This vulnerability is known as CVE-2025-54833. It is possible to launch the attack remotely. No exploit is available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-54832 | OPEXUS FOIAXpress Public Access Link 11.1.0 external control of assumed-immutable web parameter (EUVD-2025-23293)
9 months 2 weeks ago
A vulnerability labeled as problematic has been found in OPEXUS FOIAXpress Public Access Link 11.1.0. This issue affects some unknown processing. Executing manipulation can lead to external control of assumed-immutable web parameter.
The identification of this vulnerability is CVE-2025-54832. The attack may be launched remotely. There is no exploit available.
The affected component should be upgraded.
vuldb.com