Aggregator

CVE-2024-54507 | Apple macOS up to 15.1 Kernel Memory type confusion (WID-SEC-2024-3692)

Vuldb Updates
2 months 1 week ago
A vulnerability classified as problematic has been found in Apple macOS up to 15.1. This issue affects some unknown processing of the component Kernel Memory Handler. Performing manipulation results in type confusion. This vulnerability is cataloged as CVE-2024-54507. The attack must be initiated from a local position. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-54506 | Apple macOS up to 15.1 DCP Firmware out-of-bounds write (WID-SEC-2024-3692)

Vuldb Updates
2 months 1 week ago
A vulnerability labeled as critical has been found in Apple macOS up to 15.1. The impacted element is an unknown function of the component DCP Firmware Handler. The manipulation results in out-of-bounds write. This vulnerability is identified as CVE-2024-54506. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.
vuldb.com

CVE-2024-54505 | Apple iOS/iPadOS Web type confusion (Nessus ID 213311 / WID-SEC-2024-3692)

Vuldb Updates
2 months 1 week ago
A vulnerability categorized as critical has been discovered in Apple iOS and iPadOS. Affected by this issue is some unknown functionality of the component Web Handler. Executing manipulation can lead to type confusion. This vulnerability appears as CVE-2024-54505. The attack may be performed from a remote location. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

Vivaldi 再次强调不会集成生成式 AI

Solidot
2 months 1 week ago
Vivaldi CEO 谭咏文(Jon von Tetzchner)再次强调了不会在浏览器中集成生成式 AI 的立场。他的理由是相比生成式 AI，人类的 Web 更具有多元化。他说，浏览器嵌入生成式 AI 会让 Web 丧失人性，导致内容发行商的流量减少，且其主要用途是收集用户数据。他说，每一个初创公司都在搞 AI，每一家公司都试图在其产品和服务中集成 AI，但这些公司都没有关注用户的真正需求。他说，Vivaldi 选择站在人类这边，而不是选择站在炒作 AI 那边，不会将探索的乐趣变成不活跃的旁观。如果没有探索，Web 会索然无味。人类的好奇心会失去动力，Web 的多元性也会跟着消亡。他表示，生成式 AI 与社媒推荐算法面临的问题相同，它们都根据收集的数据决定用户看到的内容。但 Vivaldi 希望用户能掌控自己的数据，自主决定看到的内容，希望用户能掌控一切。如果用户想使用生成式 AI，他们可以很容易访问，并不需要浏览器去集成 AI。

CVE-2025-9689 | SourceCodester Advanced School Management System 1.0 item_select q sql injection

Vuldb Updates
2 months 1 week ago
A vulnerability described as critical has been identified in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/item_select. The manipulation of the argument q results in sql injection. This vulnerability is known as CVE-2025-9689. It is possible to launch the attack remotely. Furthermore, an exploit is available.
vuldb.com

INC

Dark Feed IO
2 months 1 week ago

You must login to view this content

cohenido

BSidesSF 2025: Future-Proof Your Career: Evolving In The Age Of AI

Security Boulevard
2 months 1 week ago

Creators, Authors and Presenters: Jay Sarwate, Alok Tongaonkar, Prutha Parikh, Ketan Nilangekar

Our deep appreciation to Security BSides - San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon - certainly a venue like no other; and via the organization's YouTube channel.

Additionally, the organization is welcoming volunteers for the BSidesSF Volunteer Force, as well as their Program Team & Operations roles. See their succinct BSidesSF 'Work With Us' page, in which, the appropriate information is to be had!

Permalink

The post BSidesSF 2025: Future-Proof Your Career: Evolving In The Age Of AI appeared first on Security Boulevard.

Marc Handelman

CVE-2019-18889 | Symfony up to 3.4.34/4.2.11/4.3.7 Cache Adapter Interface injection (FEDORA-2019-8b0ba02338 / Nessus ID 257921)

Vuldb Updates
2 months 1 week ago
A vulnerability, which was classified as critical, was found in Symfony up to 3.4.34/4.2.11/4.3.7. This impacts an unknown function of the component Cache Adapter Interface. Such manipulation leads to injection. This vulnerability is listed as CVE-2019-18889. The attack may be performed from a remote location. There is no available exploit.
vuldb.com

CVE-2020-24978 | NASM 2.15.04rc3 asm/preproc.c pp_tokline double free (Nessus ID 257920)

Vuldb Updates
2 months 1 week ago
A vulnerability was found in NASM 2.15.04rc3. It has been classified as critical. This issue affects the function pp_tokline of the file asm/preproc.c. Performing manipulation results in double free. This vulnerability is known as CVE-2020-24978. Remote exploitation of the attack is possible. No exploit is available. Applying a patch is the recommended action to fix this issue.
vuldb.com

CVE-2022-44031 | Redmine up to 4.2.8/5.0.3 Textile Formatter cross site scripting (Nessus ID 257919)

Vuldb Updates
2 months 1 week ago
A vulnerability identified as problematic has been detected in Redmine up to 4.2.8/5.0.3. The affected element is an unknown function of the component Textile Formatter. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2022-44031. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.
vuldb.com

CVE-2023-39364 | Cacti up to 1.2.24 auth_changepassword.php redirect (GHSA-4pjv-rmrp-r59x / Nessus ID 257923)

Vuldb Updates
2 months 1 week ago
A vulnerability, which was classified as problematic, was found in Cacti up to 1.2.24. Affected is an unknown function of the file auth_changepassword.php. The manipulation results in open redirect. This vulnerability is reported as CVE-2023-39364. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.
vuldb.com

CVE-2022-47656 | GPAC 2.1-DEV-rev617-g85ce76efd MP4box media_tools/av_parsers.c gf_hevc_read_sps_bs_internal buffer overflow (Issue 2353 / Nessus ID 257922)

Vuldb Updates
2 months 1 week ago
A vulnerability labeled as critical has been found in GPAC 2.1-DEV-rev617-g85ce76efd. This affects the function gf_hevc_read_sps_bs_internal of the file media_tools/av_parsers.c of the component MP4box. The manipulation results in buffer overflow. This vulnerability is known as CVE-2022-47656. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2019-12441 | GitLab Community Edition/Enterprise Edition up to 11.11 Access Control permission assignment (Nessus ID 257926)

Vuldb Updates
2 months 1 week ago
A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 11.11 and classified as critical. The affected element is an unknown function of the component Access Control. Such manipulation leads to incorrect permission assignment. This vulnerability is referenced as CVE-2019-12441. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2019-17565 | Apache Traffic Server up to 6.2.3/7.1.8/8.0.5 Chunked Encoding request smuggling (Nessus ID 257925)

Vuldb Updates
2 months 1 week ago
A vulnerability identified as critical has been detected in Apache Traffic Server up to 6.2.3/7.1.8/8.0.5. This impacts an unknown function of the component Chunked Encoding Handler. Performing manipulation results in http request smuggling. This vulnerability is reported as CVE-2019-17565. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.
vuldb.com

Managed ad