Aggregator

CVE-2025-6374 | D-Link DIR-619L 2.06B01 /goform/formSetACLFilter curTime stack-based overflow

Vuldb Updates
2 months 2 weeks ago
A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. This issue affects the function formSetACLFilter of the file /goform/formSetACLFilter. The manipulation of the argument curTime leads to stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. The identification of this vulnerability is CVE-2025-6374. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-6375 | poco up to 1.14.1 MultipartReader.cpp MultipartInputStream null pointer dereference (Issue 4915 / EUVD-2025-18796)

Vuldb Updates
2 months 2 weeks ago
A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2025-6375. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-6394 | code-projects Simple Online Hotel Reservation System 1.0 /add_reserve.php firstname sql injection (EUVD-2025-18799)

Vuldb Updates
2 months 2 weeks ago
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add_reserve.php. The manipulation of the argument firstname leads to sql injection. This vulnerability is known as CVE-2025-6394. The attack can be launched remotely. Furthermore, there is an exploit available. Other parameters might be affected as well.
vuldb.com

INC

Dark Feed IO
2 months 2 weeks ago

You must login to view this content

cohenido

DuckDuckGo Rolls Out New Scam Blocker to Protect Users from Online Threats

Cyber Security News
2 months 2 weeks ago

DuckDuckGo has significantly upgraded its Scam Blocker feature to protect users against a broader range of digital threats, including sham e-commerce platforms, fake cryptocurrency exchanges, and “scareware” tactics.  This enhancement comes as consumers reported $12.5 billion in fraud losses to the FTC in 2024 alone.  Unlike competitors relying on Google’s tools, DuckDuckGo’s proprietary system processes […]

The post DuckDuckGo Rolls Out New Scam Blocker to Protect Users from Online Threats appeared first on Cyber Security News.

Guru Baran

Court Ditches HIPAA Reproductive Health Info Privacy Rule

Ransomware DataBreachToday.com
2 months 2 weeks ago
Ruling: HHS Has No Authority to Distinguish Different Types of PHI for Restrictions
A Texas federal court has vacated 2024 changes to the HIPAA Privacy Rule made by the Biden administration to shield reproductive healthcare information from law enforcement. The court's ruling could potentially make it easier for state investigators to obtain information about abortions and gender treatments.

Aflac: 'Cybercrime Campaign' Is Targeting Insurance Industry

Ransomware DataBreachToday.com
2 months 2 weeks ago
Experts Suspect Scattered Spider Is Behind Rash of Recent Insurer Breaches
Aflac is the latest insurance company dealing with a cyberattack. The company is investigating a cyber incident that did not involve ransomware encryption of its IT systems, but did potentially compromise data. Experts suspect Scattered Spider is behind the recent rash of insurance incidents.

AdaCore Merges With CodeSecure for Unified Developer Tools

Ransomware DataBreachToday.com
2 months 2 weeks ago
Merger Strengthens AdaCore’s Reach in C and C++ Static Testing for Embedded Systems
The merger between New York-based AdaCore and Washington D.C.-area CodeSecure fills a strategic gap in static analysis for C and C++ programming, giving embedded software developers a more complete suite of security and safety verification tools in high-stakes industries.

ISMG Editors: Anubis Ransomware's Puzzling New Tactic

Ransomware DataBreachToday.com
2 months 2 weeks ago
Also: CISA's Leadership Crisis; Why AI's Confident Errors Demand Urgent Oversight
In this week's update, four editors with ISMG discussed Anubis ransomware's puzzling shift to data wiping malware, the leadership vacuum and budget uncertainty at CISA and growing concerns about how artificial intelligence tools are making confident mistakes that demand human oversight.

How Smart Timesheet Software Is Changing the Way of Work

Cyber Security News
2 months 2 weeks ago

As an employee have been managing projects in remote, hybrid, and traditional work environments, employees have always faced the same challenge: the inability to understand where time, actually is spent. Regular tasks are not completed on time as they are supposed to be, meetings are always over time, and progress reports are rarely in tandem […]

The post How Smart Timesheet Software Is Changing the Way of Work appeared first on Cyber Security News.

Kaaviya

Managed ad