Aggregator

CVE-2021-25262 | Yandex Browser up to 21.1.0 on Android URL ui layer (EUVD-2021-12173)

3 months 3 weeks ago

A vulnerability, which was classified as problematic, has been found in Yandex Browser up to 21.1.0 on Android. This issue affects some unknown processing of the component URL Handler. The manipulation leads to improper restriction of rendered ui layers. The identification of this vulnerability is CVE-2021-25262. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

CVE-2021-25255 | Yandex Browser Lite prior 21.1.0 on Android denial of service

VulDB Recent Entries

3 months 3 weeks ago

A vulnerability classified as problematic was found in Yandex Browser Lite on Android. This vulnerability affects unknown code. The manipulation leads to denial of service. This vulnerability was named CVE-2021-25255. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

IT-системы легли, но молитвы остались — Interlock выключил сеть христианской медицины

Securitylab.ru

3 months 3 weeks ago

Кибератака на Kettering Health лишила пациентов помощи врачей.

CVE-2019-16536 | Clickhouse DB 19.14.3.3 on Linux buffer overflow

VulDB Recent Entries

3 months 3 weeks ago

A vulnerability classified as critical has been found in Clickhouse DB 19.14.3.3 on Linux. This affects an unknown part. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2019-16536. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

Stormous

Dark Feed IO

3 months 3 weeks ago

You must login to view this content

cohenido

Stormous

Dark Feed IO

3 months 3 weeks ago

You must login to view this content

cohenido

产品牌桌

吴鲁加

3 months 3 weeks ago

我理解的产品牌桌：产品经理带着观点，说服老板下注，让老板赌你这个解法对。

Attaxion Becomes the First EASM Platform to Integrate ENISA’s EU Vulnerability Database (EUVD)

Security Boulevard

3 months 3 weeks ago

Dover, United States, 21st May 2025, CyberNewsWire

The post Attaxion Becomes the First EASM Platform to Integrate ENISA’s EU Vulnerability Database (EUVD) appeared first on Security Boulevard.

cybernewswire

Veeam Kasten for Kubernetes v8 unifies VM and container data protection

Help Net Security

3 months 3 weeks ago

Veeam Software launched Veeam Kasten for Kubernetes v8, designed to bring data resilience to both traditional virtual machines (VMs) and cloud-native environments, delivering security and operational efficiency. Veeam Kasten for Kubernetes v8 introduces new innovations in Kubernetes data resilience, providing enterprise-ready modern virtualization, enhanced security, effortless operations at scale, and ultimate customer freedom of choice. This latest release reinforces Veeam’s commitment to enabling enterprises to seamlessly manage their data in a unified infrastructure – securely … More →

The post Veeam Kasten for Kubernetes v8 unifies VM and container data protection appeared first on Help Net Security.

Industry News

Когда VPN — это преступление, а лайк может испортить жизнь

Securitylab.ru

3 months 3 weeks ago

Статья детально анализирует модель китайского интернета, включая систему цензуры и фильтрации, заблокированные международные платформы и их местные аналоги, законодательную базу регулирования, систему социального кредита, влияние на бизнес и перспективы развития цифровой экосистемы Китая.

Strider Spark protects organizations from state-sponsored threats

Help Net Security

3 months 3 weeks ago

Strider announced new capabilities for Spark, the company’s proprietary AI-powered intelligence engine that is transforming how organizations identify and mitigate risks associated with state-sponsored threats. Industry, government, and academic organizations are vulnerable to ongoing nation-state operations that target and compromise networks, intellectual property, people, and supply chains. Spark delivers detailed threat analysis within seconds to provide organizations with deeper insights into the risk environment through a streamlined interface that includes intuitive, query-based exploration. Spark enables … More →

The post Strider Spark protects organizations from state-sponsored threats appeared first on Help Net Security.

Industry News

CVE-2021-25254 | Yandex Browser Lite prior 21.1.0 on Android ui layer

VulDB Recent Entries

3 months 3 weeks ago

A vulnerability was found in Yandex Browser Lite on Android. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to improper restriction of rendered ui layers. This vulnerability is handled as CVE-2021-25254. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

Бывший "решала" стал коучем по выживанию в тюрьме для элитных жуликов и криптомагнатов

Securitylab.ru

3 months 3 weeks ago

Кто такие тюремные коучи и почему их услуги стоят как автомобиль.

CVE-2025-4949 | Eclipse JGit up to 7.2.0.202503040940-r XML File Parser ManifestParser xml external entity reference

VulDB Recent Entries

3 months 3 weeks ago

A vulnerability was found in Eclipse JGit up to 7.2.0.202503040940-r. It has been declared as problematic. Affected by this vulnerability is the function ManifestParser of the component XML File Parser. The manipulation leads to xml external entity reference. This vulnerability is known as CVE-2025-4949. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

Google Chrome's Built-in Manager Lets Users Update Breached Passwords with One Click

The Hackers News

3 months 3 weeks ago

Google has announced a new feature in its Chrome browser that lets its built-in Password Manager automatically change a user's password when it detects the credentials to be compromised. "When Chrome detects a compromised password during sign in, Google Password Manager prompts the user with an option to fix it automatically," Google's Ashima Arora, Chirag Desai, and Eiji Kitamura said. "On

The Hacker News

报纸刊登的推荐书单名被发现多数是 AI 捏造的

Solidot

3 months 3 weeks ago

《芝加哥太阳报(Chicago Sun-Times)》周日刊登了夏季推荐书单（Summer reading list for 2025），被发现推荐的 15 本书有 10 本是 AI 虚构的，书根本不存在，但作者是真实存在的，比如 Isabel Allende 的《Tidewater Dreams》和 Andy Weir 的《Last Algorithm》。书单作者 Marco Buscaglia 证实他使用了 AI 去生成内容，他表示自己通常会对 AI 生成内容进行真实性核查，但这一次没有，他称这完全是自己的错，对此感到尴尬。《芝加哥太阳报》通过社交媒体发表声明称正对此展开调查，表示将会公布调查结果。