Aggregator

Microsoft Warbirdd PMP Security Research

Fortinet FortiManager Unauthenticated Remote Code Execution

Nvidia GeForce 11.0.1.163 Unquoted Service Path

Asterisk AMI Originate Authenticated Remote Code Execution

A vulnerability was found in Id Software Quake 3 Arena 1.29f/1.29g. It has been declared as problematic. This vulnerability affects unknown code of the component Connection Handler. The manipulation leads to denial of service. This vulnerability was named CVE-2001-1289. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

Vodka maker Stoli files for bankruptcy in US after ransomware attack

A vulnerability was found in IBM AIX 3.2/4.1/4.2. It has been declared as very critical. This vulnerability affects the function gethostbyname of the component DNS Hostname Handler. The manipulation leads to memory corruption. This vulnerability was named CVE-1999-0101. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Security Money: Of Course Okta Should Be In The Index - BSW #374

A vulnerability classified as critical has been found in Adobe Flash Player. Affected is an unknown function. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2015-5118. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Tsixm AxDCMS 0.1.1. Affected is an unknown function of the file modules/profile/user.php. The manipulation of the argument aXconf[default_language] leads to path traversal. This vulnerability is traded as CVE-2011-0506. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

FTC targets companies that collected and sold sensitive location data

A vulnerability was found in Apache Struts 1.3.10. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file struts-cookbook/processSimple.do. The manipulation of the argument message leads to cross site scripting. This vulnerability is known as CVE-2012-1007. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in gnu gnutls up to 2.6.1 and classified as problematic. This issue affects some unknown processing in the library lib/pk-libgcrypt.c. The manipulation leads to credentials management. The identification of this vulnerability is CVE-2009-1415. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Roshan Singh Open Direct Connect Hub 0.8.1. This vulnerability affects unknown code. The manipulation leads to memory corruption. This vulnerability was named CVE-2010-1147. The attack can be initiated remotely. Furthermore, there is an exploit available.

HyperRing Releases Payment Ring with International Support

Cloudflare’s developer domains increasingly abused by threat actors

The Role of Human-in-the-Loop Preferences in Reward Function Learning for Humanoid Tasks

Tracking Reward Function Improvement with Proxy Human Preferences in ICPL

Few-shot In-Context Preference Learning Using Large Language Models: Environment Details

ICPL Baseline Methods: Disagreement Sampling and PrefPPO for Reward Learning