Aggregator

CVE-2025-49456 | Zoom Workplace on Windows Installer race condition (EUVD-2025-24528 / Nessus ID 249142)

Vuldb Updates
10 months ago
A vulnerability was found in Zoom Workplace, Workplace VDI, Rooms, Rooms Controller and Meeting SDK on Windows. It has been classified as problematic. This affects an unknown function of the component Installer. Performing manipulation results in race condition. This vulnerability is cataloged as CVE-2025-49456. The attack must be initiated from a local position. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

欧洲最大的论文工厂在乌克兰

Solidot
10 months ago
一项调查发现，一个由乌克兰公司组成的网络生产了逾 1500 篇论文，该网络可能是欧洲最大的论文工厂。柏林自由大学科研诚信侦探兼社会科学家 Anna Abalkina 在 2022 年发现了该论文工厂，她注意到有些论文作者的电邮地址域名与其学术机构的地理位置不匹配。她选择了这些域名中的一个最常用的，称呼该论文工厂为 Tanu.pro。Abalkina 与 Springer Nature 集团的 Svetlana Kleiner 合作跟踪了这些可疑域名，相关域名出现在 2017-2025 年之间发表的 1517篇论文的署名作者电邮中，涉及 46 个国家的 460 所大学的 4500 多名研究人员。大多数作者来自乌克兰、哈萨克斯坦和俄罗斯。

UltraViolet Cyber Acquires Application Security Testing Service from Black Duck

Security Boulevard
10 months ago

UltraViolet Cyber has acquired the application security testing services arm of Black Duck Software as part of an effort to expand the scope of the managed security services it provides. Company CEO Ira Goldstein said this addition to its portfolio will provide penetration testing, red teaming, threat modeling, cloud and container risk assessments, architecture risk..

The post UltraViolet Cyber Acquires Application Security Testing Service from Black Duck appeared first on Security Boulevard.

Michael Vizard

Groklaw 变成了推销加密货币的网站

Solidot
10 months ago
著名自由软件相关法务博客 Groklaw 在停止更新十多年后变成了一个推销加密货币的网站。Groklaw 曾经记录了开源自由软件历史上著名的法律事件如 SCO 诉讼，以及软件专利、标准、授权等相关主题的内容，如今在加密货币产品的广告中间只有部分内容仍然保留着，其它内容都被替换了，自由软件历史的一个重要组成部分被破坏了。在数字时代，有些东西只有失去了我们才注意到其重要性，记录历史的互联网档案馆是某种单点故障，也可能在有一天消失。保护数字历史是目前的一大紧迫任务。

CVE-2025-59033 | Microsoft Windows up to Server 2025 WDAC Policy incomplete blacklist (EUVD-2025-27143)

VulDB Recent Entries
10 months ago
A vulnerability, which was classified as critical, was found in Microsoft Windows up to Server 2025. This affects an unknown part of the component WDAC Policy. The manipulation results in incomplete blacklist. This vulnerability is cataloged as CVE-2025-59033. The attack may be launched remotely. There is no exploit available. The existence of this vulnerability is still disputed at present.
vuldb.com

Managed ad