Aggregator

A vulnerability was found in Thinkst Canarytokens up to 2019-03-01. It has been rated as problematic. Impacted is an unknown function of the component Word Document Handler. This manipulation causes improper access controls. The identification of this vulnerability is CVE-2019-9768. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A widespread campaign observed exploiting a novel zero-day vulnerability in Oracle E-Business Suite (EBS) applications, now tracked as CVE-2025-61882.  First observed on August 9, 2025, this unauthenticated remote code execution (RCE) flaw is being weaponized to bypass authentication, deploy web shells, and exfiltrate sensitive data from internet-exposed EBS instances.  CrowdStrike assesses with moderate confidence that […]

The post CrowdStrike Warns of New Mass Exploitation Campaign Leveraging Oracle E-Business Suite 0-Day appeared first on Cyber Security News.

Submit #666915 / VDB-327381

This week, Google has launched an AI Vulnerability Reward Program dedicated to security researchers who find and report flaws in the company's AI systems. [...]

Submit #666890 / VDB-327380

Submit #666889 / VDB-327379

Submit #666888 / VDB-327378

Submit #666881 / VDB-327377

Submit #666880 / VDB-327376

Submit #666879 / VDB-327375

Submit #666878 / VDB-327374

Submit #666877 / VDB-327373

Submit #666876 / VDB-327372

История о том, как одна игровая компания сломала систему, которую считали неприкасаемой.

根据上周悉尼国际宇航大会上发表的一项研究，如果能清理掉低地球轨道上最具有危险性的 50 块太空垃圾，那么新生成碎片的数量将能整体减半。论文主要作者是 Darren McKnight，他们计算了最可能与其它碎片碰撞产生更多碎片的低轨道物体。50 块最具危险性的太空垃圾有 34 块来自俄罗斯/苏联，10 块来自中国，美国 4 块，欧洲 2 块，日本 1 块。即使只清理掉其中最危险的 10 块，新太空碎片数量也能减少 30%。McKnight 指出，大部分太空垃圾来自于 2000 年之前，50 块最具有危险性的太空垃圾有 76% 是上个世纪留下的，88% 是遗留在太空的火箭残骸。坏消息是，自 2024 年 1 月 1 日以来，遗留在低地球轨道上的火箭残骸达到了 26 枚，它们会在轨道上停留逾 25 年。这 26 枚中有 21 枚是中国发射的，另外 5 枚来自美国、俄罗斯、印度和伊朗。随着中国加速发射和部署数量数以千计的国网和千帆星座，低轨道上的火箭残骸数量可能会继续增加。自去年发射国网和千帆星座以来，中国在轨道上遗留了9 枚火箭上面级的残骸，未来可能会遗留逾 100 枚。不过中国航天局的一名官员表示正在研究如何清理轨道上的太空垃圾。

A vulnerability was found in FaSTream FTP++ Server 2.0 and classified as critical. This vulnerability affects unknown code. The manipulation of the argument Username results in improper privilege management. This vulnerability is cataloged as CVE-2001-0256. The attack may be launched remotely. There is no exploit available. Applying restrictive firewalling is recommended.

A vulnerability categorized as critical has been discovered in Lotus Domino Mail Server 5.0.5. The impacted element is an unknown function of the component RCPT TO Handler. Executing manipulation can lead to memory corruption. This vulnerability appears as CVE-2001-0260. The attack may be performed from remote. In addition, an exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Gene6 G6 FTP Server 2.0. This affects an unknown function of the component Network Share Handler. Such manipulation leads to information disclosure (Password). This vulnerability is uniquely identified as CVE-2001-0264. The attack can be launched remotely. Moreover, an exploit is present. Upgrading the affected component is advised.

A vulnerability was found in SSH 1.2.27/1.2.28/1.2.29/1.2.30. It has been rated as problematic. The affected element is an unknown function of the component Secure-RPC Handler. Performing manipulation results in missing encryption of sensitive data. This vulnerability is reported as CVE-2001-0259. The attack requires a local approach. Moreover, an exploit is present. Upgrading the affected component is advised.

Как разница в миллиметр меняет ход времени.