Aggregator

CVE-2023-37516 | HCL Leap up to 9.3.3 Header no cache cache containing sensitive information (KB0119900)

Vuldb Updates
2 weeks 1 day ago
A vulnerability has been found in HCL Leap up to 9.3.3 and classified as problematic. This issue affects some unknown processing of the component Header Handler. This manipulation of the argument no cache causes use of cache containing sensitive information. This vulnerability is handled as CVE-2023-37516. It is possible to launch the attack on the local host. There is not any exploit available. The affected component should be upgraded.
vuldb.com

Tor Browser 15.0 释出

Solidot
2 weeks 1 day ago
Tor 浏览器项目释出了 v15.0 版本，该版本是首个基于 Firefox ESR 140 的稳定版本，整合了 Firefox 上游版本一年来的更新，包括垂直标签页，统一搜索按钮等新功能和可用性改进。Tor 开发者称他们审查并解决了约 200 个可能对 Tor 浏览器用户的隐私和安全造成负面影响的 Bugzilla 问题，移除了被认为不具有可审计性的 AI 功能。

Fedora Linux 43 释出

Solidot
2 weeks 1 day ago
Fedora 发行版项目宣布释出 Fedora Linux 43。新版的主要变化包括：GNOME 桌面环境仅支持 Wayland，移除了 X11 会话支持；但 KDE 桌面环境仍然支持 X11，并为 GNOME 用户提供了继续使用 X11 的权宜方法；如果字体配置文件 fontconfig`中缺少等宽字体，会默认设置一个备用等宽字体以免出现问题；gdk-pixbuf2 使用沙盒图像加载框架 Glycin 改进安全性；Noto Color Emoji 字体使用 COLRv1 格式；Python 3.14，gcc 15.2，Golang 1.25，LLVM 21，Ruby on Rails 8.0，等等。

OpenAI’s gpt-oss-safeguard enables developers to build safer AI

Help Net Security
2 weeks 1 day ago

OpenAI is releasing a research preview of gpt-oss-safeguard, a set of open-weight reasoning models for safety classification. The models come in two sizes: gpt-oss-safeguard-120b and gpt-oss-safeguard-20b. Both are fine-tuned versions of the gpt-oss open models and available under the Apache 2.0 license, allowing anyone to use, modify, and deploy them freely. OpenAI developed the models in collaboration with Discord, SafetyKit, and Robust Open Online Safety Tools (ROOST). What these models do gpt-oss-safeguard uses reasoning to … More →

The post OpenAI’s gpt-oss-safeguard enables developers to build safer AI appeared first on Help Net Security.

Sinisa Markovic

WordPress Plugin Vulnerability Exposes 7 Million Sites to XSS Attack

Cyber Security News
2 weeks 1 day ago

A critical cross-site scripting (XSS) vulnerability has been discovered in the popular LiteSpeed Cache plugin for WordPress, affecting millions of websites worldwide. The vulnerability, tracked as CVE-2025-12450, poses a significant risk to site visitors and administrators alike. The LiteSpeed Cache plugin is one of the most widely used performance optimization tools in the WordPress ecosystem, […]

The post WordPress Plugin Vulnerability Exposes 7 Million Sites to XSS Attack appeared first on Cyber Security News.

Abinaya

Managed ad