Aggregator

CVE-2025-5875 | TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n /bin/main sub_69064 text buffer overflow (EUVD-2025-17460)

Vuldb Updates
2 months 2 weeks ago
A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n. Affected is the function sub_69064 of the file /bin/main. The manipulation of the argument text leads to buffer overflow. This vulnerability is traded as CVE-2025-5875. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-5646 | Radare2 5.9.9 radiff2 /libr/cons/pal.c r_cons_rainbow_free -T memory corruption (Issue 24235 / EUVD-2025-16974)

Vuldb Updates
2 months 2 weeks ago
A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. This vulnerability was named CVE-2025-5646. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. The real existence of this vulnerability is still doubted at the moment. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added.
vuldb.com

CVE-2025-5645 | Radare2 5.9.9 radiff2 /libr/cons/pal.c r_cons_pal_init -T memory corruption (Issue 24234 / EUVD-2025-16975)

Vuldb Updates
2 months 2 weeks ago
A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. This vulnerability is uniquely identified as CVE-2025-5645. Attacking locally is a requirement. Furthermore, there is an exploit available. The real existence of this vulnerability is still doubted at the moment. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added.
vuldb.com

CVE-2025-5647 | Radare2 5.9.9 radiff2 /libr/cons/cons.c r_cons_context_break_pop -T memory corruption (Issue 24237 / EUVD-2025-16978)

Vuldb Updates
2 months 2 weeks ago
A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function r_cons_context_break_pop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The identification of this vulnerability is CVE-2025-5647. The attack needs to be approached locally. Furthermore, there is an exploit available. The real existence of this vulnerability is still doubted at the moment. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added.
vuldb.com

CVE-2025-6421 | code-projects Simple Online Hotel Reservation System 1.0 /admin/add_account.php name/admin_id sql injection (EUVD-2025-18876)

Vuldb Updates
2 months 2 weeks ago
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/add_account.php. The manipulation of the argument name/admin_id leads to sql injection. The identification of this vulnerability is CVE-2025-6421. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

McLaren Health Care Data Breach Exposes 743,000 People Personal Information

Cyber Security News
2 months 2 weeks ago

McLaren Health Care, a major healthcare organization based in Grand Blanc, Michigan, has disclosed a significant data breach that compromised the personal information of 743,131 individuals nationwide. The breach notification, filed with the Office of the Maine Attorney General, reveals that the healthcare provider experienced an external system breach through hacking activities that occurred on […]

The post McLaren Health Care Data Breach Exposes 743,000 People Personal Information appeared first on Cyber Security News.

Tushar Subhra Dutta

New Echo Chamber Attack Jailbreaks Most AI Models by Weaponizing Indirect References

Cyber Security News
2 months 2 weeks ago

A sophisticated new jailbreak technique that defeats the safety mechanisms of today’s most advanced Large Language Models (LLMs). Dubbed the “Echo Chamber Attack,” this method leverages context poisoning and multi-turn reasoning to guide models into generating harmful content without ever issuing an explicitly dangerous prompt. The breakthrough research, conducted by Ahmad Alobaid at the Barcelona-based […]

The post New Echo Chamber Attack Jailbreaks Most AI Models by Weaponizing Indirect References appeared first on Cyber Security News.

Guru Baran

UAC-0001 Hackers Attacking ICS Devices Running Windows Systems as a Server

Cyber Security News
2 months 2 weeks ago

Ukrainian government agencies have fallen victim to a sophisticated cyberattack campaign orchestrated by the UAC-0001 group, also known as APT28, targeting industrial control systems (ICS) devices running Windows operating systems as servers. The attacks, which occurred between March and April 2024, represent a significant escalation in state-sponsored cyber warfare tactics, demonstrating advanced techniques for penetrating […]

The post UAC-0001 Hackers Attacking ICS Devices Running Windows Systems as a Server appeared first on Cyber Security News.

Tushar Subhra Dutta

一颗死亡的 NASA 卫星突然发射出强大的射电信号

Solidot
2 months 2 weeks ago
NASA Relay 2 实验通信卫星于 1964 年发射升空，1967 年完全停止运作，之后一直停留在轨道上。将近 60 年后，澳大利亚天文学家使用射电望远镜阵列 Australian Square Kilometre Array Pathfinder (ASKAP)搜寻快速射电暴信号时在 Relay 2 所处位置探测到了短暂而强大的射电脉冲，令他们困惑不已。信号持续不到 30 纳秒，但在短时间内其亮度超过了天空中的所有其他天体。他们一开始以为是新的脉冲星或类似天体，之后发现信号来自于地球轨道上的 Relay 2。他们猜测可能是静电放电之类的事件，或者微陨石撞击产生的带电等离子体云。

Managed ad