Aggregator

Submit #513997 / VDB-240883

Submit #513996 / VDB-240882

A vulnerability has been found in GitLab Enterprise Edition up to 17.7.5/17.8.3/17.9.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to incorrect authorization. This vulnerability is known as CVE-2025-2045. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Submit #513995 / VDB-248256

Submit #513994 / VDB-242864

Submit #513993 / VDB-242863

Submit #513992 / VDB-240885

Security researchers at SEC Consult have discovered a significant vulnerability in CrowdStrike’s Falcon Sensor that allowed attackers to bypass detection mechanisms and execute malicious applications. This vulnerability, dubbed “Sleeping Beauty,” was initially reported to CrowdStrike in late 2023 but was dismissed as merely a “detection gap.” The bypass technique involved suspending the EDR processes rather […]

The post Researchers Bypassed CrowdStrike Falcon Sensor to Execute Malicious Applications appeared first on Cyber Security News.

Submit #513971 / VDB-298796

Socure launched Identity Manipulation Risk Score, a cross-industry predictive risk score designed to stop repeat first-party fraud abusers from exploiting the digital economy at scale. This AI-powered capability is embedded within Sigma First-Party Fraud, Socure’s innovative solution that leverages the largest cross-industry first-party fraud consortium to perform real-time analysis of dispute histories, payment denials, and account closures across millions of identities and billions of transactions. Socure’s first-party fraud consortium spans major financial institutions, fintechs, payment … More →

The post Socure launches Identity Manipulation Risk Score appeared first on Help Net Security.

Хочешь американское гражданство – раскрой все свои посты и лайки.

A newly devised "polymorphic" attack allows malicious Chrome extensions to morph into other browser extensions, including password managers, crypto wallets, and banking apps, to steal sensitive information. [...]

Submit #513970 / VDB-296577

A vulnerability, which was classified as problematic, was found in AtaksAPP Reservation Management System up to 4.2.2. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-0877. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Submit #513921 / VDB-289935