Aggregator

A vulnerability was found in Trimble SketchUp Pro. It has been declared as problematic. This vulnerability affects unknown code of the component SKP File Parser. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-7511. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in D-Link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is the function SetUpnpSettings of the file /HNAP1/ of the component UPnP Service. The manipulation of the argument SOAPAction leads to improper authorization. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is known as CVE-2025-2360. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B05_20181207. Affected is the function SetDDNSSettings of the file /HNAP1/ of the component DDNS Service. The manipulation of the argument SOAPAction leads to improper authorization. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is traded as CVE-2025-2359. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

A vulnerability was found in Apple Mac OS X up to 10.4.8. It has been classified as problematic. Affected is the function shared_region_map_file_np. The manipulation leads to denial of service. This vulnerability is traded as CVE-2007-0430. Access to the local network is required for this attack. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Submit #513751 / VDB-299827

Submit #513750 / VDB-299826

A vulnerability was found in Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /Kfxt/Service.asmx of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to sql injection. The identification of this vulnerability is CVE-2025-2358. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. This vulnerability was named CVE-2025-2357. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Submit #513708 / VDB-299825

Submit #513692 / VDB-299824

A vulnerability was found in IBM Websphere Caching Proxy Server up to 3.6/4.0.1.26. It has been classified as problematic. Affected is an unknown function of the component Header Handler. The manipulation of the argument location leads to basic cross site scripting. This vulnerability is traded as CVE-2002-1168. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Самый дорогой стриминговый фильм оказался «красивым, но бездушным».

Why Is Management of NHIs Integral for Dynamic Cloud Resources? How often have we heard about data leaks and security breaches? The frequency of such incidents highlights the pressing need for robust security measures. One such measure that often goes overlooked is the management of Non-Human Identities (NHIs), a critical component of cloud security. New […]

The post What are the best practices for managing NHIs with dynamic cloud resources? appeared first on Entro.

The post What are the best practices for managing NHIs with dynamic cloud resources? appeared first on Security Boulevard.

Are Your Cloud Security Architectures Adequate for NHI Protection? The spotlight is often on human identity protection. But have you ever considered the protection of Non-Human Identities (NHIs)? This is quickly becoming a critical point of discussion. But what exactly are NHIs, and why do they matter? NHIs are machine identities used in cybersecurity, created […]

The post How can cloud security architectures incorporate NHI protection? appeared first on Entro.

The post How can cloud security architectures incorporate NHI protection? appeared first on Security Boulevard.

How Crucial is Cloud Non-Human Identities Monitoring? Ever wondered how crucial it is to effectively monitor Non-Human Identities (NHIs) in the cloud? The need for high-grade cybersecurity measures has never been more apparent with the increasing reliance on cloud-based services across various industries. A pivotal aspect of these measures involves the management and careful oversight […]

The post Which tools are available for cloud-based NHI monitoring? appeared first on Entro.

The post Which tools are available for cloud-based NHI monitoring? appeared first on Security Boulevard.

Инженеры придумали, как заставить мощные волны проникать в воздух без потерь.

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. This vulnerability is uniquely identified as CVE-2025-2356. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in BlackVue App 3.65 on Android and classified as problematic. Affected by this issue is some unknown functionality of the component API Endpoint Handler. The manipulation of the argument BCS_TOKEN/SECRET_KEY leads to unprotected storage of credentials. This vulnerability is handled as CVE-2025-2355. Local access is required to approach this attack. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #513351 / VDB-299822

A vulnerability has been found in VAM Virtual Airlines Manager 2.6.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /vam/index.php. The manipulation of the argument registry_id/plane_icao/hub_id leads to cross site scripting. This vulnerability is known as CVE-2025-2354. The attack can be launched remotely. Furthermore, there is an exploit available. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.