Aggregator

A vulnerability was found in Open5GS MME up to 2.6.4 and classified as critical. Affected by this issue is some unknown functionality of the component S1AP Packet Handler. The manipulation of the argument MME_UE_S1AP_ID leads to denial of service. This vulnerability is handled as CVE-2023-37014. The attack may be launched remotely. There is no exploit available.

import os, zipfiledef create_file(filename): with open(filename, 'w') as f: for

In November 2024, we investigated Docker Hub, the leading public container registry, uncovering

Secrets buried in container registries pose a silent risk. Learn about their hidden vulnerabilities and what steps you can take to safeguard your infrastructure.

The post Protecting the Backbone of Modern Development: Scanning Secrets in Container Registries appeared first on Security Boulevard.

SonicWall is warning about a pre-authentication deserialization vulnerability in SonicWall S

SonicWall is warning about a pre-authentication deserialization vulnerability in SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), with reports that it has been exploited as a zero-day in attacks. [...]

Один неверный символ мог изменить судьбу миллионов транзакций.

The cybersecurity landscape faces a growing threat with the emergence of the Tycoon 2FA phishing kit, a sophisticated Phishing-as-a-Service (PhaaS) platform designed to bypass MFA and evade detection. First identified in August 2023, Tycoon 2FA has undergone significant updates, making it one of the most formidable tools for cybercriminals targeting services like Microsoft 365 and […]

The post Tycoon 2FA Phishing Kit Using Specially Crafted Code To Evade Detection appeared first on Cyber Security News.

A vulnerability has been found in Beta10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /app/tools.html. The manipulation leads to improper authentication. This vulnerability is known as CVE-2025-0637. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Logitime WebClock Application up to 5.43.0. Affected is an unknown function. The manipulation leads to sql injection. This vulnerability is traded as CVE-2024-55971. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in compose-spec compose-go up to 2.4.0. This issue affects some unknown processing of the component YAML Handler. The manipulation leads to improper input validation. The identification of this vulnerability is CVE-2024-10846. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic was found in Mohsin Khan WP Front-End Login and Register Plugin up to 2.1.0 on WordPress. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-23540. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in Linux Kernel up to 5.15.164/6.1.102/6.6.43/6.10.2. This affects the function memset of the file nft_concat_range.sh of the component netfilter. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2024-57947. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

New to hashcat,trying to run this command but it just leaves a new line and then stops , w

A Threat Actor Claims to have Leaked the Data of Ministry of Human Resources and Social Security in China

A vulnerability was found in IHU I Hear U up to 0.5.6. It has been declared as problematic. This vulnerability affects the function receiver::processpacket of the file player.cpp. The manipulation leads to improper input validation. This vulnerability was named CVE-2007-6103. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as very critical, was found in freeciv 2.2.0/2.3.0. This affects an unknown part. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2010-2445. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Mozilla Bugzilla up to 3.7.1. Affected by this issue is some unknown functionality of the component Filesystem. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2010-2470. The attack needs to be approached locally. There is no exploit available.