Aggregator

A vulnerability has been found in Sharetronix 3.3 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument admin leads to cross-site request forgery. This vulnerability is known as CVE-2014-3414. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Veeam Software announced Veeam Data Cloud for Microsoft Entra ID. With Entra ID (formerly Azure AD) facing over 600 million attacks daily, protecting organizations’ digital identity has never been more critical. Veeam Data Cloud for Microsoft Entra ID is a Software-as-a-Service (SaaS) backup solution designed to simplify data resilience for Entra ID tenants, ensuring organizations can protect their essential assets. Support for Entra ID is the latest extension of Veeam Data Cloud, a powerful, unified … More →

The post Veeam simplifies the protection of organizations’ Microsoft Entra ID users appeared first on Help Net Security.

A vulnerability, which was classified as critical, was found in Trellix FireEye EDR HX HX 10.0.0. This affects an unknown part of the component HX Service. The manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2025-0618. It is possible to initiate the attack remotely. There is no exploit available.

Cybercriminals leverage NFC fraud against ATMs and POS terminals, stealing money from consumers at scale. Resecurity (USA) investigated multiple incidents identified in Q1 2025, exceeding several million dollars in damages for one of the top Fortune 100 financial institutions in the United States due to NFC fraud. Stopping cybercriminals operating from China presents significant challenges […]

A vulnerability, which was classified as problematic, has been found in Jelsoft vBulletin 3.6.4. This issue affects the function Administrator of the component Control Panel. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2007-0830. The attack may be initiated remotely. There is no exploit available. The real existence of this vulnerability is still doubted at the moment.

A vulnerability was found in Horde Groupware 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. This vulnerability is known as CVE-2007-1679. The attack can be launched remotely. Furthermore, there is an exploit available. The real existence of this vulnerability is still doubted at the moment.

A vulnerability was found in Wizz Computers Wizz RSS Reader up to 2.1.8. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. This vulnerability is handled as CVE-2007-2060. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in DuWare Duarticle 1.0/1.1. It has been classified as critical. Affected is an unknown function of the file detail.asp. The manipulation of the argument iType leads to sql injection. This vulnerability is traded as CVE-2006-6354. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in phpAdsNew 2 Dev 2001-10-09. Affected is an unknown function in the library admin/lib-maintenance.inc.php. The manipulation of the argument phpAds_path leads to file inclusion. This vulnerability is traded as CVE-2006-6415. It is possible to launch the attack remotely. There is no exploit available. The real existence of this vulnerability is still doubted at the moment.

A vulnerability was found in Novell NetMail 3.5.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component IMAP Daemon. The manipulation leads to stack-based buffer overflow. This vulnerability is handled as CVE-2006-6761. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Novell NetMail up to 3.10. It has been declared as very critical. This vulnerability affects unknown code. The manipulation leads to stack-based buffer overflow. This vulnerability was named CVE-2006-6424. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Google Mini Search Appliance. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. This vulnerability is handled as CVE-2006-6223. The attack may be launched remotely. There is no exploit available.

Google 曾表示将在 Chrome 中逐步淘汰第三方 Cookies，改为其它替代方案如隐私沙盒（Privacy Sandbox），隐私沙盒跟踪用户的兴趣，允许广告商根据兴趣展示广告，而用户可以管理兴趣并对其归类分组。但隐私沙盒的推行并不顺利。现在 Google 表示 Chrome 将继续使用第三方 Cookies。负责隐私沙盒的 Google 高管 Anthony Chavez 表示此举并不意味着隐私沙盒项目的终止，部分成果还会继续推进，比如将为 Chrome 隐身模式用户提供 IP Protection。

Ivanti has launched Ring Deployment in Ivanti Neurons for Patch Management. The new capability allows IT teams to reduce risks associated with patching systems by creating and configuring deployment rings, enabling them to strategically group devices based on organizational needs or risk tolerance. As the threat landscape continues to evolve, Ivanti remains committed to providing solutions that help organizations effectively manage risk, minimize business disruptions and ensure a smooth user experience. IT teams have the … More →

The post Ivanti Ring Deployment reduces risks associated with patching systems appeared first on Help Net Security.

Microsoft has fixed several known issues that caused Blue Screen of Death (BSOD) and installation issues on Windows Server 2025 systems with a high core count. [...]

Когда твой HR — бот, и он не против флирта.

The Ripple cryptocurrency npm JavaScript library named xrpl.js has been compromised by unknown threat actors as part of a software supply chain attack designed to harvest and exfiltrate users' private keys. The malicious activity has been found to affect five different versions of the package: 4.2.1, 4.2.2, 4.2.3, 4.2.4, and 2.14.2. The issue has been addressed in versions 4.2.5 and 2.14.3.