Aggregator

Qualys warns of two information disclosure flaws in apport and systemd-coredump, the core dump handlers in Ubuntu, Red Hat Enterprise Linux, and Fedora distros. Researchers discovered a vulnerability in Apport (Ubuntu’s core dump handler) and another bug in systemd-coredump, which is used in the default configuration of Red Hat Enterprise Linux 9 and the Fedora distribution. systemd-coredump automatically captures “core […]

A vulnerability was found in Microsoft Windows. It has been rated as very critical. Affected by this issue is some unknown functionality of the component Color Management. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2008-2245. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Microsoft Windows Server 2008/Vista. It has been rated as problematic. This issue affects some unknown processing of the component IPsec Policy Handler. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2008-2246. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Microsoft Windows. It has been classified as critical. This affects an unknown part. The manipulation leads to improper resource management. This vulnerability is uniquely identified as CVE-2008-2251. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Microsoft Windows. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to improper access controls. This vulnerability was named CVE-2008-2252. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Microsoft Internet Explorer 6/7/8. It has been classified as problematic. This affects an unknown part of the component Print Table of Links. The manipulation leads to basic cross site scripting. This vulnerability is uniquely identified as CVE-2008-2281. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to disable the affected component.

A vulnerability was found in Microsoft Media Player 11.x. It has been rated as critical. Affected by this issue is some unknown functionality of the component Sampling Rate Handler. The manipulation leads to code injection. This vulnerability is handled as CVE-2008-2253. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple Mac OS X up to 10.5.1. It has been rated as very critical. This issue affects some unknown processing. The manipulation leads to improper resource management. The identification of this vulnerability is CVE-2008-3621. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Apple Mac OS X up to 10.5. Affected is an unknown function of the component Wiki Server. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2008-3622. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Meta и Anduril двигают оборону в цифровую эру.

A vulnerability classified as critical was found in Microsoft Internet Explorer and Outlook Express 5.01. Affected by this vulnerability is an unknown functionality of the component Javascript. The manipulation leads to improper privilege management. This vulnerability is known as CVE-2000-0105. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in vldPersonals 2.7. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument gender2 leads to sql injection. This vulnerability is uniquely identified as CVE-2014-9005. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

In an era where data breaches and privacy violations continue to make headlines, organizations worldwide face increased pressure to implement and verify robust data access controls. As of May 2025, regulatory bodies are intensifying enforcement of privacy regulations like GDPR, specifically focusing on how companies manage and audit access to sensitive personal information. This scrutiny […]

The post Auditing Data Access Controls for Privacy Regulation Adherence appeared first on Cyber Security News.

Author/Presenter: Daemon Tamer

Our sincere appreciation to BSidesLV, and the Presenters/Authors for publishing their erudite Security BSidesLV24 content. Originating from the conference’s events located at the Tuscany Suites & Casino; and via the organizations YouTube channel.

Permalink

The post BSidesLV24 – Keynotes: Closing Ceremony appeared first on Security Boulevard.

A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to sql injection. This vulnerability is traded as CVE-2025-5298. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Quorum Cyber identifies two new NodeSnake RAT variants, strongly attributed to Interlock ransomware, impacting UK higher education and local government.

中国游戏公司以免费网游闻名，如《原神》和《鸣潮》在全世界都有数百万玩家。但随着《黑神话：悟空》的成功，越来越多的中国游戏工作室开始转向开发单机游戏。以前中国游戏公司不愿意开发单机游戏，因为免费网游的商业模式更成熟，更容易收回开发成本。即将发布的单机游戏《明末：渊虚之羽》总监夏思源说，单机游戏的风险更大，其命运在上市当天就注定了，而网游如果上线第一天出现问题还是有可能补救的。前腾讯游戏 CTO 现 Epic Games 中国 CTO 沈黎（Li Shen）说，中国游戏公司一直对单机游戏感兴趣，但直到《黑神话：悟空》在全世界售出数百万份拷贝之后，游戏发行商才愿意投资单机游戏。新单机游戏如 S-Game 的《影之刃零》和《明末：渊虚之羽》都希望借助《黑神话：悟空》成功的东风。游戏行业的专业人士表示，因网游的经验中国游戏公司在商业设计和运营方面全球领先，但游戏设计和整体质量尤其是叙事和剧本创作存在不足。类似其它中国公司，中国游戏工作室的加班文化也颇受争议，很多游戏公司都使用 996 工作制，夏思源称他的公司不鼓励加班，认为加班效率低下。他说中国有句俗话叫众人拾柴火焰高，希望其团队的努力能鼓励更多公司开发单机游戏。

A vulnerability was found in Drake CMS 0.4.11 Rc8. It has been classified as problematic. This affects an unknown part. The manipulation of the argument d_root leads to path traversal. This vulnerability is uniquely identified as CVE-2008-1371. An attack has to be approached locally. Furthermore, there is an exploit available.

Technical details about a maximum-severity Cisco IOS XE WLC arbitrary file upload flaw tracked as CVE-2025-20188 have been made publicly available, bringing us closer to a working exploit. [...]

A vulnerability classified as problematic has been found in Comdev eCommerce 3.0. This affects an unknown part of the file wce.download.php. The manipulation of the argument Download leads to path traversal. This vulnerability is uniquely identified as CVE-2005-2543. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.