Aggregator

CVE-2011-5227 | Enterasys Netsight 4.1.0.79 nssyslogd.exe memory corruption (EDB-23887 / ID 12688)

Vuldb Updates
3 months 1 week ago
A vulnerability classified as very critical has been found in Enterasys Netsight 4.1.0.79. This affects an unknown part of the file nssyslogd.exe. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2011-5227. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

普京表态要封锁微软和 Zoom 的服务

Solidot
3 months 1 week ago
俄罗斯总统普京周一表示，外国服务提供商如微软和 Zoom 的行为违反了俄罗斯利益，应该受到限制。在俄罗斯入侵乌克兰之后，西方国家对俄罗斯进行了制裁，大部分西方企业都撤离了俄罗斯，如麦当劳就出售了其在俄业务。微软和 Zoom 是少数仍然向俄罗斯提供有限服务的美国公司。普京没有进一步说明是否会采取行动封锁微软和 Zoom 的服务，他强调要发展本国替代软件解决方案。

Why app modernization can leave you less secure

Help Net Security
3 months 1 week ago

Enterprises typically “modernize” access patterns for an application by enabling industry standard protocols like OIDC or SAML to provide single sign-on (SSO) for legacy apps via a cloud identity provider (IDP). That’s a major step towards better user experience, improved credential hygiene, and centralized authentication, but it is not enough. Most modernization projects stop at the authentication layer, believing that identity transformation is complete once SAML or OIDC is wired up. What’s often overlooked is … More →

The post Why app modernization can leave you less secure appeared first on Help Net Security.

Help Net Security

CVE-2025-48382 | codelibs fess up to 14.19.1 org.codelibs.fess.helper.SystemHelper createTempFile permission assignment (GHSA-g88v-2j67-9rmx)

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in codelibs fess up to 14.19.1. It has been declared as problematic. This vulnerability affects the function createTempFile of the component org.codelibs.fess.helper.SystemHelper. The manipulation leads to incorrect permission assignment. This vulnerability was named CVE-2025-48382. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-48054 | radashi up to 12.5.0 set path prototype pollution (GHSA-2xv9-ghh9-xc69)

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in radashi up to 12.5.0. It has been classified as critical. This affects the function Set. The manipulation of the argument path leads to improperly controlled modification of object prototype attributes ('prototype pollution'). This vulnerability is uniquely identified as CVE-2025-48054. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-33079 | IBM Controller/Cognos Controller 11.0.0/11.0.1/11.1.0 credentials storage

VulDB Recent Entries
3 months 1 week ago
A vulnerability was found in IBM Controller and Cognos Controller 11.0.0/11.0.1/11.1.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to unprotected storage of credentials. This vulnerability is handled as CVE-2025-33079. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-48827 | vBulletin up to 5.7.5/6.0.3 api.php?method=protectedMethod improper protection of alternate path

VulDB Recent Entries
3 months 1 week ago
A vulnerability, which was classified as critical, was found in vBulletin up to 5.7.5/6.0.3. Affected is an unknown function of the file /api.php?method=protectedMethod. The manipulation leads to improper protection of alternate path. This vulnerability is traded as CVE-2025-48827. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

How AI agents reshape industrial automation and risk management

Help Net Security
3 months 1 week ago

In this Help Net Security interview, Michael Metzler, Vice President Horizontal Management Cybersecurity for Digital Industries at Siemens, discusses the cybersecurity implications of deploying AI agents in industrial environments. He talks about the risks that come with AI agents making semi-autonomous decisions, and why a layered security approach like Defense-in-Depth is key to keeping industrial systems safe. What are the implications of an AI agent being compromised in a critical infrastructure environment, such as an … More →

The post How AI agents reshape industrial automation and risk management appeared first on Help Net Security.

Mirko Zorz

Managed ad