Aggregator

CVE-2005-4467 | PHPGedView up to 3.3.7 help_text_vars.php PGV_BASE_DIRECTORY path traversal (EDB-1379 / Nessus ID 20339)

Vuldb Updates
8 months 3 weeks ago
A vulnerability classified as problematic was found in PHPGedView up to 3.3.7. This affects an unknown function of the file help_text_vars.php. Executing manipulation of the argument PGV_BASE_DIRECTORY can lead to path traversal. This vulnerability is handled as CVE-2005-4467. The attack can be executed remotely. Additionally, an exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2005-4468 | PHPGedView up to 3.3.7 help_text_vars.php PGV_BASE_DIRECTORY memory corruption (EDB-1379 / Nessus ID 20339)

Vuldb Updates
8 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in PHPGedView up to 3.3.7. This impacts an unknown function of the file help_text_vars.php. The manipulation of the argument PGV_BASE_DIRECTORY leads to memory corruption. This vulnerability is uniquely identified as CVE-2005-4468. The attack is possible to be carried out remotely. Moreover, an exploit is present. It is advisable to upgrade the affected component.
vuldb.com

CVE-2005-2638 | PHPFreeNews 1.40 newscategoryform.php NewsMode cross site scripting (EDB-26160 / BID-14590)

Vuldb Updates
8 months 3 weeks ago
A vulnerability marked as problematic has been reported in PHPFreeNews 1.40. This issue affects some unknown processing of the file newscategoryform.php. This manipulation of the argument NewsMode causes basic cross site scripting. This vulnerability is tracked as CVE-2005-2638. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com

CVE-2005-4423 | PHPFM up to 0.2.2 File Upload memory corruption (EDB-26474 / Nessus ID 20169)

Vuldb Updates
8 months 3 weeks ago
A vulnerability described as critical has been identified in PHPFM up to 0.2.2. This affects an unknown function of the component File Upload. Such manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2005-4423. The attack can be launched remotely. Moreover, an exploit is present. Upgrading the affected component is recommended.
vuldb.com

Top 10 Best Vulnerability Management Software in 2025

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
8 months 3 weeks ago

In today’s fast-paced digital environment, organizations face constant threats from cybercriminals exploiting weaknesses in IT systems. Vulnerability management software is one of the most crucial elements in safeguarding a network, as it helps identify, evaluate, and remediate security gaps before attackers exploit them. By automating vulnerability scanning, prioritizing risks, and offering intelligent patch management, these […]

The post Top 10 Best Vulnerability Management Software in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CISO Advisory

微软宣布 Windows 11 v25H2 GA

Solidot
8 months 3 weeks ago
微软正式宣布 Windows 11 25H2 GA。该版本的版本号为 26200.6584。Windows 11 24H2 用户将通过 enablement packages(eKB)安装最新更新，但 Windows 11 23H2 用户没有 eKB，最佳方法是 Windows Update。用户可选择现在下载 Installation Assistant 安装 Windows 11 25H2，或者等到 10 月 14 日通过 Windows Server Update Services (WSUS)安装更新。Windows 11 25H2 主要变化包括：移除 PowerShell 2.0 和 Windows Management Instrumentation 命令行工具；启用 AI 辅助安全编码——微软没有对此进行解释；Wi-Fi 7；通过组策略选择卸载预安装的 Microsoft Store 应用；等等。Windows 11 25H2 将一直支持到 2027 年 10 月。

From Chatbots to Agents: The Evolution Toward Agentic AI

Security Boulevard
8 months 3 weeks ago

8 min readAgentic AI is emerging, shifting from passive chatbots to systems that reason, adapt, and autonomously execute multi-step tasks. Unlike "read-only" AI, agentic AI is "read-write," able to modify data and trigger actions. This active AI offers automation opportunities but necessitates new security for non-human identities.

The post From Chatbots to Agents: The Evolution Toward Agentic AI appeared first on Aembit.

The post From Chatbots to Agents: The Evolution Toward Agentic AI appeared first on Security Boulevard.

Dan Kaplan

200,000 More SIM Cards Found Linked to Secret Telecom Network in NYC

Security Boulevard
8 months 3 weeks ago

Federal investigators have found 200,000 more SIM cards at a site in New Jersey that were part of a sprawling hidden telecommunications network that initially included 100,000 other SIM cards and 300 servers scattered across at least five locations that could have taken down communications throughout New York City.

The post 200,000 More SIM Cards Found Linked to Secret Telecom Network in NYC appeared first on Security Boulevard.

Jeffrey Burt

CVE-2025-41421 | TeamViewer Full Client/Host up to 15.69 on Windows link following

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability was found in TeamViewer Full Client and Host up to 15.69 on Windows. It has been rated as critical. The impacted element is an unknown function. This manipulation causes link following. This vulnerability is handled as CVE-2025-41421. It is possible to launch the attack on the local host. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2023-22611 | Schneider Electric EcoStruxure Geo SCADA Expert 2019 information disclosure (SEVD-2023-010-02 / EUVD-2023-26747)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in Schneider Electric EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021 and ClearSCADA. It has been classified as problematic. This issue affects some unknown processing. Performing manipulation results in information disclosure. This vulnerability is identified as CVE-2023-22611. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2023-22610 | Schneider Electric EcoStruxure Geo SCADA Expert 2019 Message improper authorization (SEVD-2023-010-02 / EUVD-2023-26746)

Vuldb Updates
8 months 3 weeks ago
A vulnerability was found in Schneider Electric EcoStruxure Geo SCADA Expert 2019, EcoStruxure Geo SCADA Expert 2020, EcoStruxure Geo SCADA Expert 2021 and ClearSCADA. It has been declared as critical. Impacted is an unknown function of the component Message Handler. Executing manipulation can lead to improper authorization. This vulnerability is tracked as CVE-2023-22610. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

Managed ad