Aggregator

CVE-2025-55012 | zed-industries zed up to 0.197.2 Agent Panel authentication bypass (GHSA-x34m-39xw-g2wr)

Vuldb Updates
1 month 2 weeks ago
A vulnerability has been found in zed-industries zed up to 0.197.2 and classified as critical. This vulnerability affects unknown code of the component Agent Panel. The manipulation leads to authentication bypass using alternate channel. This vulnerability was named CVE-2025-55012. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-47444 | GiveWP Plugin up to 4.6.0 on WordPress insertion of sensitive information into sent data

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability classified as problematic was found in GiveWP Plugin up to 4.6.0 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to insertion of sensitive information into sent data. This vulnerability is known as CVE-2025-47444. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

掉落在居民屋顶的陨石比地球更古老

Solidot
1 month 2 weeks ago
6 月 26 日一颗陨石在美国佐治亚州上空爆炸，碎片击穿了 Henry 县 McDonough 市一户民居屋顶。佐治亚大学(University of Georgia)研究人员检测了陨石碎片，发现它属于球粒陨石（Chondrite），根据其类型该陨石的形成于大约 45.6 亿年前，比地球的形成时间还要古老 2000 万年。该居民表示仍然在家周围发现撞击留下的碎片。

AI-Driven Vulnerability Management as a Solution for New Era

Security Boulevard
1 month 2 weeks ago

Vulnerability management (VM) is the continuous process of finding, evaluating, listing, reporting, and providing AI-driven patch recommendations for security vulnerabilities across an organization’s inventory. In practice, this means regularly scanning IT assets for known vulnerabilities, prioritizing which ones to fix first, and providing customised recommendations based on the vulnerabilities found before attackers can exploit them. […]

The post AI-Driven Vulnerability Management as a Solution for New Era appeared first on Kratikal Blogs.

The post AI-Driven Vulnerability Management as a Solution for New Era appeared first on Security Boulevard.

Puja Saikia

CVE-2004-1910 | Symantec Security Check Virus Detection Profiles rufsi.dll GetPrivateProfileString memory corruption (EDB-23919 / XFDB-15778)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Symantec Security Check Virus Detection. It has been classified as critical. This affects the function GetPrivateProfileString in the library rufsi.dll of the component Profiles. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2004-1910. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The real existence of this vulnerability is still doubted at the moment.
vuldb.com

CVE-2003-0558 | Leapware LeapFTP 2.7.3.600 PASV Request IP address memory corruption (EDB-54 / Nessus ID 11705)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Leapware LeapFTP 2.7.3.600. It has been classified as critical. Affected is an unknown function of the component PASV Request Handler. The manipulation of the argument IP address leads to memory corruption. This vulnerability is traded as CVE-2003-0558. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2003-0567 | Cisco IOS up to 12.2 IPv4 Sequence input validation (VU#411332 / EDB-59)

Vuldb Updates
1 month 2 weeks ago
A vulnerability classified as very critical has been found in Cisco IOS up to 12.2. Affected is an unknown function of the component IPv4 Sequence Handler. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2003-0567. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

沃茨对 YouTube 的欺诈诉讼停滞不前

Solidot
1 month 2 weeks ago
2020 年，骗子利用苹果联合创始人沃茨（Steve Wozniak）的片段在 YouTube 上发布视频以骗取比特币，沃茨的妻子 Janet Wozniak 多次举报了该视频，但 YouTube 对此没有采取任何行动，两人都认为 YouTube 是在助纣为虐，他们为此提起了诉讼。然而五年之后，沃茨接受采访透露案件停滞不前，原因是名为 Section 230 的联邦法规。Section 230 是非常宽泛的法规，它限制了对社媒平台提起任何诉讼的能力。沃茨说，Section 230 规定平台不需要对上面发布的任何内容承担任何责任。对于沃茨的诉讼，Google/YouTube 公关部门的 José Castañeda 发表了一份冠冕堂皇但没有任何正面回应的措辞，声称公司严肃对待平台上滥用行为，会在发现违规行为时迅速采取行动。

CVE-2025-3892 | Axis OS up to 12.5.30 ACAP Application unnecessary privileges

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability classified as critical has been found in Axis OS up to 12.5.30. Affected is an unknown function of the component ACAP Application Handler. The manipulation leads to execution with unnecessary privileges. This vulnerability is traded as CVE-2025-3892. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-30027 | Axis OS up to 12.3.35 ACAP Configuration File improper validation of specified type of input

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability was found in Axis OS up to 12.3.35. It has been rated as critical. This issue affects some unknown processing of the component ACAP Configuration File Handler. The manipulation leads to improper validation of specified type of input. The identification of this vulnerability is CVE-2025-30027. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

PLA：针对文本到图像生成模型的提示学习攻击

Seebug Paper
1 month 2 weeks ago
作者：Xinqi Lyu, Yihao Liu, Yanjie Li, Bin Xiao 译者：知道创宇404实验室翻译组 原文链接：https://arxiv.org/html/2508.03696v1 摘要 文本到图像（T2I）模型已在各种应用中广泛采用。尽管取得了成功，但T2I模型的潜在滥用会带来生成不适宜公开内容（NSFW）的重大风险。为了研究T2I模型的脆弱性，本文深入探讨了对抗攻...

Managed ad