Aggregator

A vulnerability was found in nyariv sandboxjs up to 0.8.23 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). This vulnerability is handled as CVE-2025-34146. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in Cisco Linksys WRT120N Firmware 1.0.07. This affects the function fprintf. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2014-125122. The attack can only be done within the local network. Furthermore, there is an exploit available.

A vulnerability has been found in MPlayer Lite r33064 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to stack-based buffer overflow. This vulnerability is known as CVE-2011-10008. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in D-Link DIR-605L up to 1.13. Affected is the function getAuthCode of the file /goform/formLogin of the component CAPTCHA Handler. The manipulation of the argument FILECODE leads to stack-based buffer overflow. This vulnerability is traded as CVE-2012-10021. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in Artica Pandora FMS up to 5.0RC1. This issue affects some unknown processing of the component Anyterm Web Interface. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2014-125124. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in Eppler WebTester 5.x. This vulnerability affects unknown code of the file install2.php of the component HTTP Handler. The manipulation of the argument cpusername/cppassword/cpdomain leads to os command injection. This vulnerability was named CVE-2013-10037. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Simple E-Document up to 3.1. This affects an unknown part of the component Cookie Header Handler. The manipulation leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2014-125126. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in ProcessMaker Open Source up to 2.5.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file appFolderAjax.php of the component neoclassic Skin. The manipulation leads to code injection. This vulnerability is handled as CVE-2013-10035. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MagnusBilling 7.8.5.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mbilling/index.php/user/save of the component Request Handler. The manipulation leads to improper access controls. This vulnerability is known as CVE-2025-52289. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in LXCenter Kloxo up to 6.1.11. It has been classified as critical. Affected is an unknown function of the file lbin/webcommand.php. The manipulation of the argument login-name leads to sql injection. This vulnerability is traded as CVE-2014-125123. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Following a number of high-profile security and development issues surrounding the use of LLMs and GenAI to code and create applications, it's worth taking a temperature check to ask: Is this technology ready for prime time?

A vulnerability classified as problematic has been found in Linux Kernel up to 4.19.324/6.11.10/6.12.1. Affected is the function bitmap_ip_uadt of the component netfilter. The manipulation leads to privilege escalation. This vulnerability is traded as CVE-2024-53141. Access to the local network is required for this attack to succeed. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.78/6.12.15/6.13.3. Affected by this vulnerability is the function bind in the library lib/refcount.c. The manipulation leads to use after free. This vulnerability is known as CVE-2025-21756. The attack needs to be approached within the local network. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Мем-монета превратилась в мем-скандал.

Discover the newly revealed pricing for Google’s AI video model, Veo 2. Learn about its competitive cost structure and how it compares to other video gene

The post Google’s Veo 2 AI Video Model Priced at $0.50 per Second appeared first on Security Boulevard.

SIEMs, CleanUpLoader, FileFix, and npm packages: Catch up on the last month's episodes of Red Canary Office Hours.

睡眠呼吸暂停是一种在睡眠期间，暂停呼吸或呼吸减弱症状导致的睡眠紊乱。每一次的暂停期间可从数秒钟到数分钟不等，而且整晚发生好几次。在一般情况下，这个症状会产生吵杂的打鼾声。几十年来，睡眠呼吸暂停的主要治疗方法是持续正压气道通气治疗（CPAP Therapy），患者睡前需戴上面罩，面罩连接到 CPAP 机器，它通过压入空气保持呼吸道畅通。CPAP 虽然有效，但对很多人而言非常不方便。现在专注治疗睡眠呼吸暂停的制药公司 Apnimed 发布的新闻稿，宣布一种口服药物即将面世，它公布了第二轮三期临床试验的积极结果，这种口服药物可在睡前服用，帮助保持呼吸道畅通。如果最终获得批准，这种药物可能会改变许多人的生活。

Symmetric cryptography powers everything from HTTPS to JWT tokens, but key management remains a significant challenge. This developer guide covers three critical use cases—session keys, self-use keys, and pre-shared keys—with practical strategies for secure generation, rotation, and storage.

The post Symmetric Cryptography in Practice: A Developer’s Guide to Key Management appeared first on Security Boulevard.

In 2025, modernizing outdated IT infrastructure is key for organizations aiming to stay competitive, secure, and scalable.  Finding a reliable partner is not easy, so for this guide, we’ve prepared the list of the 5 best IT infrastructure modernisation services in 2025, selected through a thorough evaluation of service breadth, technical expertise, pricing transparency, and […]

The post 5 Best IT Infrastructure Modernisation Services In 2025 appeared first on Cyber Security News.