Aggregator

A vulnerability was found in Amano Xoffice Parking Solutions 7.1.3879. It has been classified as critical. The affected element is an unknown function. The manipulation leads to sql injection. This vulnerability is listed as CVE-2023-23331. The attack must be carried out from within the local network. There is no available exploit.

A vulnerability categorized as very critical has been discovered in SICK UE410-EN3, UE410-EN1, UE410-EN3S04, UE410-EN4, FX0-GENT00000, FX0-GMOD00000, FX0-GPNT00000, FX0-GENT00030, FX0-GPNT00030 and FX0-GMOD00010. Affected by this vulnerability is an unknown functionality of the component Telnet. Executing manipulation can lead to use of obsolete function. The identification of this vulnerability is CVE-2023-23451. The attack may be launched remotely. There is no exploit available.

Deal Would Boost Veeam's Cyber Footprint as Data Protection Vendor Valuations Surge
Bloomberg reported that data protection and ransomware recovery giant Veeam is in advanced talks to buy DSPM and AI security vendor Securiti for $1.8 billion, with an announcement coming as soon as this week. The deal would accelerate Veeam's pivot from backup and disaster recovery to cybersecurity.

The Edmund Group's Adler on Managing Third- and Fourth-Party Risk in Healthcare
Healthcare organizations face growing risks from data distribution, vendor dependencies and global instability. Steven Adler, partner at The Edmund Group, discusses practical steps to strengthen vendor oversight and resilience.

2020 Hack Has Cost EyeMed About $12.6M in Multiple Regulatory Fines, Settlements
Benefits provider EyeMed Vision Care has agreed to pay $5 million and improve its security practices to settle class action litigation involving a 2020 phishing breach. The incident has been the subject of previous multimillion dollar settlements and enforcement actions by multiple state regulators.

Proliferating Age Verification Systems a Hacker Target
A vendor breach linked to Discord exposed government ID uploads used in age verification, raising alarms among privacy experts who warn that third-party data collection systems are becoming high-value targets amid rising legislative mandates for online age checks.

Attacks on RMM Tools Surged in 2025, With 51 Solutions Flagged as Targets
Cybercriminals are hijacking trusted remote monitoring and management tools to bypass defenses, gain persistent access and quietly stage ransomware attacks. Experts warn MSPs and enterprises that supply chain exposure amplifies the scale of these intrusions.

A critical Redis flaw, dubbed “RediShell,” has exposed 60,000 unprotected servers to exploitation

Militairen die moesten ingrijpen vanwege de kaping van een boorplatform, kregen versterking van koning Willem-Alexander. Hij was vandaag te gast bij de operators van de Netherlands Maritime Special Operations Force. Die maakt deel uit van het Korps Mariniers.

«Помни историю» — но не как развлечение…

A vulnerability described as critical has been identified in Sun Solaris up to 8.0. The affected element is the function glob of the component FTP Server. The manipulation of the argument LIST results in memory corruption. This vulnerability is known as CVE-2001-0249. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability described as problematic has been identified in Netscape Enterprise Server 3.0/4.0. This affects an unknown function of the component Web Publishing Feature. The manipulation of the argument INDEX results in information disclosure (Directory). This vulnerability was named CVE-2001-0250. The attack may be performed from remote. In addition, an exploit is available. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in Netscape Enterprise Server 3.0. This impacts an unknown function of the component Command Handler. This manipulation of the argument REVLOG causes denial of service. The identification of this vulnerability is CVE-2001-0251. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Netscape iPlanet Enterprise Server 4.1. Affected is an unknown function of the component GET Request Handler. Such manipulation with the input /../ leads to denial of service. This vulnerability is referenced as CVE-2001-0252. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

The Qilin ransomware gang has claimed attacks at Mecklenburg County Public Schools, stealing financial records and childrens’ medical files

The new rule imposes a mandatory 24-hour mobile internet blackout for anyone entering Russia with a foreign SIM card.

A vulnerability classified as critical was found in AvantFAX 3.3.7. The impacted element is an unknown function of the file FileUpload.php. The manipulation results in unrestricted upload. This vulnerability was named CVE-2023-23328. The attack needs to be approached within the local network. There is no available exploit.

A vulnerability has been found in AvantFAX 3.3.7 and classified as problematic. Affected is an unknown function of the component Backup Handler. Performing manipulation results in information disclosure. This vulnerability is identified as CVE-2023-23327. The attack can only be performed from the local network. There is not any exploit available.

A vulnerability has been found in AvantFAX 3.3.7 and classified as problematic. This affects an unknown function. Performing manipulation results in cross site scripting. This vulnerability was named CVE-2023-23326. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as critical, was found in Zumtobel Netlink CCD Onboard up to 3.80. This impacts an unknown function. Such manipulation of the argument NetHostname leads to command injection. This vulnerability is uniquely identified as CVE-2023-23325. The attack can only be initiated within the local network. No exploit exists.