Aggregator

CVE-2023-39739 | Regina Sweets&Bakery Line 13.6.1 Broadcast Message information disclosure (EUVD-2023-43439)

Vuldb Updates
2 months 1 week ago
A vulnerability was found in Regina Sweets&Bakery Line 13.6.1. It has been classified as problematic. Affected is an unknown function of the component Broadcast Message Handler. Performing a manipulation results in information disclosure. This vulnerability is reported as CVE-2023-39739. The attacker must have access to the local network to execute the attack. No exploit exists.
vuldb.com

CVE-2023-39736 | Fukunaga_memberscard Line 13.6.1 Broadcast Message information disclosure (EUVD-2023-43436)

Vuldb Updates
2 months 1 week ago
A vulnerability was found in Fukunaga_memberscard Line 13.6.1 and classified as problematic. This impacts an unknown function of the component Broadcast Message Handler. Such manipulation leads to information disclosure. This vulnerability is documented as CVE-2023-39736. The attack requires being on the local network. There is not any exploit available.
vuldb.com

CVE-2023-39737 | Matsuya Line 13.6.1 Broadcast Message information disclosure (EUVD-2023-43437)

Vuldb Updates
2 months 1 week ago
A vulnerability categorized as problematic has been discovered in Matsuya Line 13.6.1. Affected is an unknown function of the component Broadcast Message Handler. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-2023-39737. The attack can only be done within the local network. There is not any exploit available.
vuldb.com

RMS 称大模型是伪智能

Solidot
2 months 1 week ago
RMS（Richard Stallman）在佐治亚理工学院（Georgia Institute of Technology）发表演讲，促进自由软件的同时也谈论了当今的新技术。RMS 认为 AI 太频繁的被用于形容没有智能的东西，大语言模型只是一种生成器，能生成文本但并不理解内容。它们也经常犯错。称大模型是 AI 就相当于认可它们有智能，他认为应当少用。RMS 建议应该将大模型称为是伪智能（Pretend Intelligence）或简写 PI，多用 PI 有助于克服对大模型的炒作，这些炒作试图说服人们信任大模型，好将他们的一切都交给开发和控制大模型的大公司。RMS 也对联网和能上传数据的汽车表示反感，认为它们含有恶意功能。他也拒绝拥有智能手机，认为智能手机是“奥威尔式的追踪和监控设备”。他仍然使用一台旧型号的 ThinkPad 笔记本电脑，最喜欢的自由发行版是 Trisquel，对 Rust 的商标使用条款有些看法，但认为只要是自由软件都支持。所以使用 Emacs 或使用 Vi 都没关系，只要是自由软件，但 Emacs 爱每一位用户，不用它会伤心。

CVE-2026-1425 | pymumu SmartDNS up to 47.1 SVBC Record Parser src/dns.c _dns_decode_rr_head/_dns_decode_SVCB_HTTPS stack-based overflow

Vuldb Updates
2 months 1 week ago
A vulnerability categorized as critical has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function _dns_decode_rr_head/_dns_decode_SVCB_HTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. This vulnerability is known as CVE-2026-1425. It is possible to launch the attack remotely. No exploit is available. Applying a patch is advised to resolve this issue.
vuldb.com

Apache Hadoop Vulnerability Exposes Systems Potential Crashes or Data Corruption

Cyber Security News
2 months 1 week ago

A moderate-severity vulnerability in the Hadoop Distributed File System (HDFS) native client could allow attackers to trigger system crashes or corrupt critical data through maliciously crafted URI inputs. The vulnerability, tracked as CVE-2025-27821, affects Apache Hadoop versions 3.2.0 through 3.4.1. Stems from an out-of-bounds write flaw in the URI parser of the HDFS native client. […]

The post Apache Hadoop Vulnerability Exposes Systems Potential Crashes or Data Corruption appeared first on Cyber Security News.

Abinaya

CVE-2023-39734 | Vision Meat Works TrackDiner 13.6.1 Broadcast Message information disclosure (EUVD-2023-43434)

Vuldb Updates
2 months 1 week ago
A vulnerability, which was classified as problematic, was found in Vision Meat Works TrackDiner 13.6.1. The impacted element is an unknown function of the component Broadcast Message Handler. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2023-39734. The attack must originate from the local network. There is no exploit available.
vuldb.com

CVE-2023-39732 | Tokueimaru_waiting Line 13.6.1 Broadcast Message information disclosure (EUVD-2023-43432)

Vuldb Updates
2 months 1 week ago
A vulnerability labeled as problematic has been found in Tokueimaru_waiting Line 13.6.1. This issue affects some unknown processing of the component Broadcast Message Handler. Such manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2023-39732. The attack can only be initiated within the local network. No exploit exists.
vuldb.com

CVE-2023-39735 | Uomasa_Saiji_news Line 13.6.1 Broadcast Message information disclosure (EUVD-2023-43435)

Vuldb Updates
2 months 1 week ago
A vulnerability was found in Uomasa_Saiji_news Line 13.6.1. It has been rated as problematic. This impacts an unknown function of the component Broadcast Message Handler. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2023-39735. Access to the local network is required for this attack. No exploit is available.
vuldb.com

Google ties AI Search to Gmail and Photos, raising new privacy questions

Help Net Security
2 months 1 week ago

Google is expanding Personal Intelligence into AI Mode in Google Search to deliver more personalized search results. AI Mode can securely connect to your Gmail and Google Photos to provide tailored recommendations without requiring you to repeatedly explain your preferences or ongoing plans. Personal Intelligence “Personal Intelligence transforms Search into an experience that feels uniquely yours by connecting the dots across your Google apps. Starting today, Google AI Pro and AI Ultra subscribers can opt-in … More →

The post Google ties AI Search to Gmail and Photos, raising new privacy questions appeared first on Help Net Security.

Anamarija Pogorelec

CVE-2026-1428 | WellChoose Single Sign-On Portal System prior IFTOP_P4_181 os command injection

VulDB Recent Entries
2 months 1 week ago
A vulnerability classified as critical has been found in WellChoose Single Sign-On Portal System. This affects an unknown function. The manipulation leads to os command injection. This vulnerability is referenced as CVE-2026-1428. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-1429 | WellChoose Single Sign-On Portal System prior IFTOP_P4_181 cross site scripting

VulDB Recent Entries
2 months 1 week ago
A vulnerability described as problematic has been identified in WellChoose Single Sign-On Portal System. The impacted element is an unknown function. Executing a manipulation can lead to cross site scripting. The identification of this vulnerability is CVE-2026-1429. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

Managed ad