Allianz Life says July data breach impacts 1.5 million people
Allianz Life has completed the investigation into the cyberattack it suffered in July and determined that nearly 1.5 million individuals are impacted. [...]
Aggregator
Википедия больше не про свободу слова. Сооснователь проекта подтвердил наличие "чёрных списков"
8 months 3 weeks ago
Как спор о Википедии превратился в политический шторм.
A $50 'Battering RAM' Can Bust Confidential Computing
8 months 3 weeks ago
Researchers have demonstrated an attack that can break through modern Intel and AMD processor technologies that protect encrypted data stored in memory.
Elizabeth Montalbano, Contributing Writer
CVE-2023-22617 | PowerDNS Recursor up to 4.8.0 DS Record recursion (EUVD-2023-26753)
8 months 3 weeks ago
A vulnerability was found in PowerDNS Recursor up to 4.8.0. It has been declared as problematic. This vulnerability affects unknown code of the component DS Record Handler. Such manipulation leads to uncontrolled recursion.
This vulnerability is traded as CVE-2023-22617. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2023-22616 | Insyde InsydeH2O up to 5.5 Save State Register external reference (EUVD-2023-26752)
8 months 3 weeks ago
A vulnerability was found in Insyde InsydeH2O up to 5.5. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component Save State Register. Performing manipulation results in externally controlled reference.
This vulnerability is reported as CVE-2023-22616. The attacker must have access to the local network to execute the attack. No exploit exists.
vuldb.com
CVE-2023-22615 | Insyde InsydeH2O up to 5.5 IhisiSmm state issue (EUVD-2023-26751)
8 months 3 weeks ago
A vulnerability described as critical has been identified in Insyde InsydeH2O up to 5.5. Affected is an unknown function of the component IhisiSmm. Executing manipulation can lead to state issue.
The identification of this vulnerability is CVE-2023-22615. The attack needs to be done within the local network. There is no exploit available.
vuldb.com
CVE-2023-32786 | LangChain up to 0.0.155 URL server-side request forgery (EUVD-2023-2674)
8 months 3 weeks ago
A vulnerability labeled as critical has been found in LangChain up to 0.0.155. This vulnerability affects unknown code of the component URL Handler. Such manipulation leads to server-side request forgery.
This vulnerability is uniquely identified as CVE-2023-32786. The attack can be launched remotely. No exploit exists.
vuldb.com
CVE-2023-22614 | Insyde InsydeH2O up to 5.5 ChipsetSvcSmm memory corruption (EUVD-2023-26750)
8 months 3 weeks ago
A vulnerability marked as critical has been reported in Insyde InsydeH2O up to 5.5. This impacts an unknown function of the component ChipsetSvcSmm. Performing manipulation results in memory corruption.
This vulnerability was named CVE-2023-22614. The attack needs to be approached within the local network. There is no available exploit.
vuldb.com
Cybersecurity Awareness Month 2025: Knowledge is power
8 months 3 weeks ago
We're kicking off the month with a focus on the human element: the first line of defense, but also the path of least resistance for many cybercriminals
Mydata
8 months 3 weeks ago
You must login to view this content
cohenido
CVE-2005-2637 | PHPFreeNews 1.40 searchresults.php CatID sql injection (EDB-26159 / BID-14589)
8 months 3 weeks ago
A vulnerability labeled as critical has been found in PHPFreeNews 1.40. This vulnerability affects unknown code of the file searchresults.php. The manipulation of the argument CatID results in sql injection.
This vulnerability is identified as CVE-2005-2637. The attack can be executed remotely. Additionally, an exploit exists.
vuldb.com
CVE-2005-4467 | PHPGedView up to 3.3.7 help_text_vars.php PGV_BASE_DIRECTORY path traversal (EDB-1379 / Nessus ID 20339)
8 months 3 weeks ago
A vulnerability classified as problematic was found in PHPGedView up to 3.3.7. This affects an unknown function of the file help_text_vars.php. Executing manipulation of the argument PGV_BASE_DIRECTORY can lead to path traversal.
This vulnerability is handled as CVE-2005-4467. The attack can be executed remotely. Additionally, an exploit exists.
Upgrading the affected component is advised.
vuldb.com
CVE-2005-4468 | PHPGedView up to 3.3.7 help_text_vars.php PGV_BASE_DIRECTORY memory corruption (EDB-1379 / Nessus ID 20339)
8 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in PHPGedView up to 3.3.7. This impacts an unknown function of the file help_text_vars.php. The manipulation of the argument PGV_BASE_DIRECTORY leads to memory corruption.
This vulnerability is uniquely identified as CVE-2005-4468. The attack is possible to be carried out remotely. Moreover, an exploit is present.
It is advisable to upgrade the affected component.
vuldb.com
CVE-2005-2638 | PHPFreeNews 1.40 newscategoryform.php NewsMode cross site scripting (EDB-26160 / BID-14590)
8 months 3 weeks ago
A vulnerability marked as problematic has been reported in PHPFreeNews 1.40. This issue affects some unknown processing of the file newscategoryform.php. This manipulation of the argument NewsMode causes basic cross site scripting.
This vulnerability is tracked as CVE-2005-2638. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com
CVE-2005-4423 | PHPFM up to 0.2.2 File Upload memory corruption (EDB-26474 / Nessus ID 20169)
8 months 3 weeks ago
A vulnerability described as critical has been identified in PHPFM up to 0.2.2. This affects an unknown function of the component File Upload. Such manipulation leads to memory corruption.
This vulnerability is uniquely identified as CVE-2005-4423. The attack can be launched remotely. Moreover, an exploit is present.
Upgrading the affected component is recommended.
vuldb.com
Top 10 Best Vulnerability Management Software in 2025
8 months 3 weeks ago
In today’s fast-paced digital environment, organizations face constant threats from cybercriminals exploiting weaknesses in IT systems. Vulnerability management software is one of the most crucial elements in safeguarding a network, as it helps identify, evaluate, and remediate security gaps before attackers exploit them. By automating vulnerability scanning, prioritizing risks, and offering intelligent patch management, these […]
The post Top 10 Best Vulnerability Management Software in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
CISO Advisory
Обогнали ChatGPT, стоили копейки и снова удивили. DeepSeek доказывает, что ИИ может быть дешёвым
8 months 3 weeks ago
Экономика больших языковых моделей отныне изменится навсегда.
Moving your business from the physical to the digital
8 months 3 weeks ago
Security questions to ask your IT service providers when considering a digital transition
JGroup
8 months 3 weeks ago
You must login to view this content
cohenido
微软宣布 Windows 11 v25H2 GA
8 months 3 weeks ago
微软正式宣布 Windows 11 25H2 GA。该版本的版本号为 26200.6584。Windows 11 24H2 用户将通过 enablement packages(eKB)安装最新更新，但 Windows 11 23H2 用户没有 eKB，最佳方法是 Windows Update。用户可选择现在下载 Installation Assistant 安装 Windows 11 25H2，或者等到 10 月 14 日通过 Windows Server Update Services (WSUS)安装更新。Windows 11 25H2 主要变化包括：移除 PowerShell 2.0 和 Windows Management Instrumentation 命令行工具；启用 AI 辅助安全编码——微软没有对此进行解释；Wi-Fi 7；通过组策略选择卸载预安装的 Microsoft Store 应用；等等。Windows 11 25H2 将一直支持到 2027 年 10 月。