Aggregator

Stellar Cyber enhances identity security with ITDR capabilities

Help Net Security
9 months ago

At the upcoming Black Hat USA 2025 in Las Vegas, Stellar Cyber will debut its Identity Threat Detection & Response (ITDR) capabilities, fully embedded into its open, unified, AI-driven SecOps platform. See Identity Threat Detection & Response (ITDR) capabilities in action at Booth 5642, August 2–7, 2025, or book your meeting here. ITDR marks a step forward on the journey to a human-augmented autonomous SOC, empowering security teams with identity-centric visibility and control—without requiring yet … More →

The post Stellar Cyber enhances identity security with ITDR capabilities appeared first on Help Net Security.

Industry News

CVE-2025-20949 | Samsung Members 2.4.25/3.9.10.11/4.2.005 path traversal

Vuldb Updates
9 months ago
A vulnerability was found in Samsung Members 2.4.25/3.9.10.11/4.2.005. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to path traversal: '.../...//'. The identification of this vulnerability is CVE-2025-20949. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-5022 | Mitsubishi Electric PV-DR004J/PV-DR004JA Communication weak password (EUVD-2025-20985)

Vuldb Updates
9 months ago
A vulnerability was found in Mitsubishi Electric PV-DR004J and PV-DR004JA. It has been rated as critical. Affected by this issue is some unknown functionality of the component Communication Handler. The manipulation leads to weak password requirements. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is handled as CVE-2025-5022. The attack needs to be done within the local network. There is no exploit available.
vuldb.com

CVE-2025-5023 | Mitsubishi Electric PV-DR004J/PV-DR004JA hard-coded credentials (EUVD-2025-20984)

Vuldb Updates
9 months ago
A vulnerability classified as critical has been found in Mitsubishi Electric PV-DR004J and PV-DR004JA. This affects an unknown part. The manipulation leads to hard-coded credentials. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is uniquely identified as CVE-2025-5023. The attack needs to be initiated within the local network. There is no exploit available.
vuldb.com

CVE-2025-28245 | Alteryx Server 2023.1.1.460 Notification Body cross site scripting (EUVD-2025-21050)

Vuldb Updates
9 months ago
A vulnerability, which was classified as problematic, has been found in Alteryx Server 2023.1.1.460. Affected by this issue is some unknown functionality of the component Notification Body Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-28245. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-2942 | Order Delivery Date Plugin up to 12.5.x on WordPress Private Post information disclosure (EUVD-2025-21114)

Vuldb Updates
9 months ago
A vulnerability was found in Order Delivery Date Plugin up to 12.5.x on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Private Post Handler. The manipulation leads to information disclosure. This vulnerability is known as CVE-2025-2942. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-6200 | GeoDirectory Plugin up to 2.8.119 on WordPress Shortcode Attribute cross site scripting (EUVD-2025-21113)

Vuldb Updates
9 months ago
A vulnerability was found in GeoDirectory Plugin up to 2.8.119 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Shortcode Attribute Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-6200. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-6006 | ZKTeco ZKBio CVSecurity V5000 4.1.0 Summer Schedule Schedule Name cross site scripting (EUVD-2024-47170)

Vuldb Updates
9 months ago
A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Summer Schedule Handler. The manipulation of the argument Schedule Name leads to cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is handled as CVE-2024-6006. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor explains, "that ZKBio Security V5000 has been withdrawn from the market and [is] recommended for upgrading to the ZKBio CVSecurity latest version."
vuldb.com

CVE-2024-6005 | ZKTeco ZKBio CVSecurity V5000 4.1.0 Department Section Department Name cross site scripting (EUVD-2024-47169)

Vuldb Updates
9 months ago
A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4.1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Department Section. The manipulation of the argument Department Name leads to cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is known as CVE-2024-6005. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor explains, "that ZKBio Security V5000 has been withdrawn from the market and [is] recommended for upgrading to the ZKBio CVSecurity latest version."
vuldb.com

Researchers Reveal How Hacktivist Groups Gain Attention and Choose Their Targets

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
9 months ago

Cybersecurity researchers at Graphika have unveiled comprehensive findings on the operational dynamics of hacktivist organizations, revealing sophisticated attention-seeking behaviors and strategic target selection methodologies. Through their ATLAS intelligence reporting platform, analysts have systematically monitored approximately 700 active and inactive hacktivist entities since 2022, encompassing state-sponsored personas, geopolitically aligned collectives supporting Russia and Ukraine, and regionally-focused […]

The post Researchers Reveal How Hacktivist Groups Gain Attention and Choose Their Targets appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

INC

Dark Feed IO
9 months ago

You must login to view this content

cohenido

Managed ad