Aggregator

A vulnerability categorized as problematic has been discovered in HashiCorp Nomad and Nomad Enterprise. Affected by this vulnerability is an unknown functionality of the component Compressed Artifact Stanza Source Handler. Executing manipulation can lead to highly compressed data. This vulnerability is registered as CVE-2023-0821. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability marked as critical has been reported in Moodle. Affected by this issue is some unknown functionality of the component Quiz Web Service. Performing manipulation results in business logic errors. This vulnerability was named CVE-2022-40208. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as problematic, was found in Red Hat OpenStack. This vulnerability affects unknown code of the file /var/log/messages. Executing manipulation can lead to sensitive information in log files. This vulnerability is handled as CVE-2022-3261. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability labeled as problematic has been found in RSS Extension on MediaWiki. This issue affects some unknown processing of the component RSS Element Handler. Executing manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2022-29969. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in GLPI up to 10.0.3. It has been rated as problematic. Impacted is an unknown function of the component Cookie Handler. Performing manipulation results in session expiration. This vulnerability is reported as CVE-2022-39234. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

Discover why USDT stablecoin payments are becoming popular worldwide. Learn the benefits, risks, and practical tips for using…

Сигнал оторвался от стекла и вышел на рекордную скорость внутри… ничего.

A vulnerability labeled as problematic has been found in Grafana up to 7.5.12/8.3.3. This affects an unknown function of the component Data Source Handler. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2022-21673. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in GLPI up to 10.0.1 and classified as problematic. This vulnerability affects unknown code. The manipulation results in information disclosure. This vulnerability is known as CVE-2022-31068. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability marked as critical has been reported in GLPI up to 10.0.3. Affected by this issue is some unknown functionality of the file install/update.php of the component Debug Panel. Performing manipulation results in improper access controls. This vulnerability is known as CVE-2022-39370. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability was found in SAML Auth Plugin on Moodle and classified as problematic. This vulnerability affects unknown code. The manipulation results in open redirect. This vulnerability is identified as CVE-2022-39183. The attack can be executed remotely. There is not any exploit available.

根据 Valve 的 Erik Peterson 在 devcom 2025 开发者大会上做的 Steam Platform Update 2025 报告，从 2024 年 8 月 1 日到 2025 年 8 月 1 日，Steam 每天增加 10.9 万新付费玩家——定义为首次在平台上购买游戏的用户。Steam 每天的在线玩家数峰值也从 2020 年的 2000 万增加到 4000 万以上；2020-2025 年之间增长最快的市场是日本、巴西、中国、德国和美国。中文如今是 Steam 的第一大语言，简体中文和繁体中文用户占用户总数的 35%，其次是英语 33%、俄语 8.4%、西班牙语 4.6%、巴西葡萄牙语 2.8%。对 Steam 平台最成功的付费游戏的分析显示，逾半数游戏定价低于 50 美元，近四分之一游戏定价低于 30 美元，这表明游戏无论价格如何都可以获得经济上的成功。2024 年 Steam 平台有逾 500 款游戏收入超过 400 万美元。

Apitor collected data without informing parents or asking for permission, the FTC said, violating federal parental consent requirements.

The post FTC announces settlement with toy robot makers that tracked location of children appeared first on CyberScoop.

A sophisticated new Python-based information stealer has emerged in the cybersecurity landscape, demonstrating advanced capabilities for data exfiltration through Discord channels. The malware, identified as “Inf0s3c Stealer,” represents a significant evolution in the realm of data theft tools, combining traditional system reconnaissance techniques with modern communication platforms to avoid detection while efficiently harvesting sensitive information […]

The post New Stealthy Python Malware Leverages Discord to Steal Data From Windows Machines appeared first on Cyber Security News.

The wrong data can be worse than no data at all. Across sectors, operations teams are dealing with an unprecedented volume of information from applications, networks, clouds, and security systems. For artificial intelligence for IT operations (AIOps) to deliver reliable results, that data must be refined and...

A vulnerability labeled as critical has been found in Sitecore Experience Manager and Experience Platform up to 9.3/10.4. This affects an unknown part. Such manipulation leads to use of externally-controlled input to select classes or code. This vulnerability is documented as CVE-2025-53693. The attack can be executed remotely. There is not any exploit available.

A vulnerability marked as critical has been reported in Samsung Devices 4.1.01.0. Affected is an unknown function of the component Horization Smart Suggestions. The manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2023-21479. The attack is possible to be carried out remotely. No exploit exists. Applying a patch is the recommended action to fix this issue.

A vulnerability classified as problematic has been found in Samsung Camera. Affected by this issue is some unknown functionality of the component Install Package Handler. This manipulation causes missing authorization. The identification of this vulnerability is CVE-2023-21482. It is feasible to perform the attack on the physical device. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability marked as problematic has been reported in Sitecore Experience Manager and Experience Platform up to 10.4. This vulnerability affects unknown code. Performing manipulation results in information disclosure. This vulnerability is reported as CVE-2025-53694. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Crestron TOUCHSCREENS x70 up to 3.001.0034.001 and classified as critical. Affected is an unknown function of the component SCP Command Handler. Executing manipulation can lead to argument injection. The identification of this vulnerability is CVE-2025-47421. The physical device can be targeted for the attack. There is no exploit available.