Aggregator

Manassas City Public Schools in Virginia USA shut down Monday after a cyber incident

Китай побил рекорд по запускам, но Galactic Energy напомнила: космос ошибок не прощает.

A vulnerability identified as critical has been detected in projectworlds Visitor Management System. Affected by this issue is some unknown functionality. This manipulation causes sql injection. This vulnerability is handled as CVE-2020-25760. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in projectworlds Visitor Management System. This affects an unknown part. Such manipulation leads to basic cross site scripting (Stored). This vulnerability is uniquely identified as CVE-2020-25761. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as problematic, has been found in LibTIFF. This issue affects the function TIFFRasterScanlineSize64. This manipulation causes resource consumption. The identification of this vulnerability is CVE-2023-52355. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Vim and Neovim and classified as critical. Affected by this issue is some unknown functionality of the file getchar.c of the component Modeline. This manipulation causes os command injection. This vulnerability is tracked as CVE-2019-12735. The attack is possible to be carried out remotely. Moreover, an exploit is present. The affected component should be upgraded.

De Braziliaanse fabrikant Embraer is gisteren begonnen met de bouw van het eerste C-390 militaire transportvliegtuig voor Nederland. Dit markeert een volgende stap in een internationaal samenwerkingsproject.  

A Chinese woman known as the "Bitcoin Queen" was sentenced in London to 11 years and eight months in jail for laundering Bitcoin from a £5.5 billion ($7.3 billion) cryptocurrency investment scheme. [...]

Внутри проекта Neom творится совсем не то, о чём говорят публично — и это признают сами участники.

Mozilla has rolled out Firefox 145, addressing a series of high-severity vulnerabilities that could allow attackers to execute arbitrary code on users’ systems. Announced on November 11, 2025, the release patches flaws primarily in the browser’s graphics, JavaScript, and DOM components, urging immediate upgrades to mitigate risks from potential exploits. The update tackles 15 CVEs, […]

The post Firefox Releases Security Update to Fix Multiple Vulnerabilities Allowing Arbitrary Code Execution appeared first on Cyber Security News.

A new cyber-attack has been observed exploiting Google Find Hub to remotely wipe Android devices, linked to North Korean APTs

A vulnerability, which was classified as critical, has been found in Rockwell Automation Studio 5000 Simulation Interface. Affected by this issue is some unknown functionality. The manipulation leads to information disclosure. This vulnerability is documented as CVE-2025-11697. The attack needs to be performed locally. There is not any exploit available.

Learn how MojoAuth enhances popular SaaS development kits like ShipFast, Supastarter, Divjoy, and SaaS Pegasus with powerful passwordless authentication — including passkeys, OTPs, and WebAuthn support.

The post Integrate MojoAuth with Popular SaaS Kits like ShipFast, Divjoy, SaaS Pegasus, and Supastarter for Next-Gen Passwordless Login appeared first on Security Boulevard.

New proposals will combat the growing threat to UK critical national infrastructure (CNI).

Для понимания нашего лица генетикам пришлось воскресить ДНК древнего вида в клетках рыбы.

A vulnerability was found in Flickr Show Plugin up to 1.5 on WordPress. It has been rated as problematic. This affects the function flickrshow of the component Shortcode Handler. The manipulation of the argument div_height leads to cross site scripting. This vulnerability is documented as CVE-2025-12672. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in TNC Toolbox Plugin up to 1.4.2 on WordPress. It has been declared as problematic. Impacted is the function Tnc_Wp_Toolbox_Settings::save_settings of the component cPanel API Handler. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2025-12539. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Hydra Booking Plugin up to 1.1.27 on WordPress. It has been rated as problematic. The affected element is the function tfhb_meeting_form_submit_callback of the component AJAX Endpoint. Performing manipulation results in improper restriction of excessive authentication attempts. This vulnerability is identified as CVE-2025-12787. The attack can be initiated remotely. There is not any exploit available.

A vulnerability categorized as critical has been discovered in Blocksy Companion Plugin up to 2.1.19 on WordPress. The impacted element is an unknown function of the component SVG File Parser. Executing manipulation can lead to unrestricted upload. This vulnerability is tracked as CVE-2025-12846. The attack can be launched remotely. No exploit exists.