Aggregator
CVE-2010-4752 | LightNEasy 3.2.1 LightNEasy.php page sql injection (EDB-15060 / ID 118994)
CVE-2010-2911 | Kayako eSupport 3.70.02 index.php newsid sql injection (EDB-14392 / XFDB-60455)
CVE-2010-2912 | Kayako eSupport 3.70.02 index.php _a sql injection (EDB-14404 / XFDB-60457)
INC
You must login to view this content
DragonForce
You must login to view this content
Warlock
You must login to view this content
Warlock
You must login to view this content
Pear
You must login to view this content
LG WebOS TV Vulnerability Let Attackers Bypass Authentication and Enable Full Device Takeover
A critical vulnerability has been discovered in LG’s WebOS for smart TVs, allowing an attacker on the same local network to bypass authentication mechanisms and achieve full control over the device. The flaw, which affects models like the LG WebOS 43UT8050, enables unauthenticated attackers to gain root access, install malicious applications, and completely compromise the […]
The post LG WebOS TV Vulnerability Let Attackers Bypass Authentication and Enable Full Device Takeover appeared first on Cyber Security News.
Ransomware attackers used incorrectly stored recovery codes to disable EDR agents
All target organizations are different, but ransomware attackers are highly adaptive and appreciate – and will exploit – any mistake you make. The latest Akira ransomware attacks Managed security service providers and external incident responders have had a front-row seat for observing many of the actions carried out by Akira ransomware affiliates in the last few months. In early August 2025, both Arctic Wolf and Huntress researchers warned about the possibility of Akira affiliates using … More →
The post Ransomware attackers used incorrectly stored recovery codes to disable EDR agents appeared first on Help Net Security.
Робот Тяньгун стал первым в мире профессиональным тестировщиком кроссовок — зарплата в киловаттах
CVE-2004-2383 | Microsoft Internet Explorer up to 6 Event information disclosure (EDB-23766 / XFDB-15337)
CVE-2004-1104 | Microsoft Internet Explorer up to 6 Statusbar Remote Code Execution (VU#702086 / EDB-24714)
CVE-2004-0842 | Microsoft Internet Explorer up to 6.1 SP2 CSS heap-based overflow (VU#291304 / EDB-24328)
CVE-2004-0842 | Microsoft Internet Explorer up to 6 Cascading Style Sheet heap-based overflow (MS04-038 / VU#291304)
CVE-2004-0841 | Microsoft Internet Explorer up to 6 privileges management (VU#413886 / EDB-24266)
CVE-2004-2090 | Microsoft Internet Explorer up to 6 SP1 VBA File information disclosure (EDB-23668 / XFDB-15078)
New FileFix Variant Delivers StealC Malware Through Multilingual Phishing Site
New APT28 Attack Via Signal Messenger Delivers BeardShell and Covenant Malware
Late in the summer of 2025, cybersecurity researchers uncovered a sophisticated spearphishing campaign targeting Ukrainian military personnel via the Signal messaging platform. The operation, dubbed “Phantom Net Voxel,” begins with a malicious Office document sent through private Signal chats, masquerading as urgent administrative forms or compensation requests. Upon opening, the document’s embedded macros drop a […]
The post New APT28 Attack Via Signal Messenger Delivers BeardShell and Covenant Malware appeared first on Cyber Security News.