Aggregator

Canada bans Hikvision over national security concerns

Security Affairs
7 months 2 weeks ago
Canada bans Hikvision over national security concerns, ordering the company to stop operations and barring its tech from government use. Canada ordered Chinese surveillance firm Hikvision to cease all operations in the country, citing national security concerns. Minister Mélanie Joly announced the decision after a security review found vendor’s activities could pose a threat. Canada […]
Pierluigi Paganini

对 AI 的反对之声逐渐高涨

Solidot
7 months 2 weeks ago
越来越多的人开始认识到，生成式 AI 不是来帮助他们提高生产力的，而是降低成本，让亿万富翁们更加富有。对 AI 的反对之声正逐渐高涨。根据皮尤研究中心（Pew Research Center）的调查，在 ChatGPT 发布前，有 38% 的美国人对 AI 在日常生活中的广泛应用感到担忧而不是兴奋；到 2023 年底，随着生成式 AI 的快速传播，对 AI 的担忧增加到了 52%，之后一直徘徊在同一水平。AI 的好处是晦涩而平淡的，但它的危害则是显而易见且立竿见影。AI 需要建造更多数据中心，而新数据中心主要依赖于火电，火电会污染空气、水和土壤，影响当地社区。20 世纪的创新生态是让更多的人更容易获得成功的机会，但生成式 AI 主要受益者是那些已经拥有资源的人，他们想要在生产环节摆脱人工。

CVE-2012-2027 | Adobe Photoshop up to 12.0.4 TIFF Image resource management (EDB-18633 / Nessus ID 59172)

Vuldb Updates
7 months 2 weeks ago
A vulnerability classified as problematic was found in Adobe Photoshop. This vulnerability affects unknown code of the component TIFF Image Handler. The manipulation leads to improper resource management. This vulnerability was named CVE-2012-2027. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2005-4302 | Indexcor ezDatabase 2.1.2 index.php path traversal (EDB-26853 / BID-15908)

Vuldb Updates
7 months 2 weeks ago
A vulnerability, which was classified as problematic, has been found in Indexcor ezDatabase 2.1.2. This issue affects some unknown processing of the file index.php. The manipulation of the argument p leads to path traversal. The identification of this vulnerability is CVE-2005-4302. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

Turning Remote Sites into Intelligent Edge Environments

Netscout
7 months 2 weeks ago
Remote sites are not just extensions of the corporate headquarters. They’re active, data-rich domains where local interactions quietly shape broader service outcomes. Yet problems at the edge are often slow to surface and hard to resolve. That’s starting to change. Intelligent edge environments are beginning to...
Anthony Cote

CitrixBleed 2 might be actively exploited (CVE-2025-5777)

Help Net Security
7 months 2 weeks ago

While Citrix has observed some instances where CVE-2025-6543 has been exploited on vulnerable NetScaler networking appliances, the company still says that they don’t have evidence of exploitation for CVE-2025-5349 or CVE-2025-5777, both of which have been patched earlier this month. CVE-2025-5777, in particular, has captured the attention of infosec professionals due to its similarity to CVE-2023-4966, aka CitrixBleed. Consequently, CVE-2025-5777 has been informally dubbed “CitrixBleed 2” by security researcher Kevin Beaumont. Both CitrixBleed and CitrixBleed … More →

The post CitrixBleed 2 might be actively exploited (CVE-2025-5777) appeared first on Help Net Security.

Zeljka Zorz

Germany Urges Apple, Google to Block Chinese AI App DeepSeek Over Privacy Rules

Cyber Security News
7 months 2 weeks ago

Germany’s data protection authorities have escalated their scrutiny of Chinese artificial intelligence applications, with Berlin’s data protection commissioner Meike Kamp formally requesting Apple and Google to review and potentially remove DeepSeek from their respective app stores. The move, announced on June 27, 2025, represents a significant regulatory challenge for the popular AI chatbot that has […]

The post Germany Urges Apple, Google to Block Chinese AI App DeepSeek Over Privacy Rules appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2025-6905 | code-projects Car Rental System 1.0 /signup.php fname sql injection

Vuldb Updates
7 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in code-projects Car Rental System 1.0. This issue affects some unknown processing of the file /signup.php. The manipulation of the argument fname leads to sql injection. The identification of this vulnerability is CVE-2025-6905. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

Glasgow City Warns of Parking Fine Scam as Cyber Security Incident Continues

Cyber Security News
7 months 2 weeks ago

Glasgow City Council has issued an urgent warning to residents about a sophisticated parking fine scam that has emerged amid ongoing cybersecurity concerns affecting the city’s digital infrastructure. The fraudulent scheme targets motorists through text messages and emails claiming they owe parking fines, with criminals leveraging the current security incident to add credibility to their […]

The post Glasgow City Warns of Parking Fine Scam as Cyber Security Incident Continues appeared first on Cyber Security News.

Tushar Subhra Dutta

Akira

Dark Feed IO
7 months 2 weeks ago

You must login to view this content

cohenido

CVE-2013-2472 | Oracle Java up to 5.0 Update 45/6 Update 45/7 Update 21 2D integer coercion (EDB-28331 / Nessus ID 69762)

Vuldb Updates
7 months 2 weeks ago
A vulnerability has been found in Oracle Java up to 5.0 Update 45/6 Update 45/7 Update 21 and classified as critical. Affected by this vulnerability is an unknown functionality of the component 2D. The manipulation leads to integer coercion error. This vulnerability is known as CVE-2013-2472. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-6903 | code-projects Car Rental System 1.0 /admin/approve.php ID sql injection (EUVD-2025-19528)

Vuldb Updates
7 months 2 weeks ago
A vulnerability was found in code-projects Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. This vulnerability is known as CVE-2025-6903. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-6904 | code-projects Car Rental System 1.0 /admin/add_cars.php car_name sql injection (EUVD-2025-19526)

Vuldb Updates
7 months 2 weeks ago
A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_cars.php. The manipulation of the argument car_name leads to sql injection. This vulnerability is handled as CVE-2025-6904. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-6901 | code-projects Inventory Management System 1.0 removeUser.php userid sql injection (EUVD-2025-19525)

Vuldb Updates
7 months 2 weeks ago
A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php_action/removeUser.php. The manipulation of the argument userid leads to sql injection. The identification of this vulnerability is CVE-2025-6901. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-6902 | code-projects Inventory Management System 1.0 /php_action/editUser.php edituserName sql injection (EUVD-2025-19524)

Vuldb Updates
7 months 2 weeks ago
A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /php_action/editUser.php. The manipulation of the argument edituserName leads to sql injection. This vulnerability is traded as CVE-2025-6902. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad