Aggregator

CVE-2024-13871, CVE-2024-13872: Unauthenticated Command Injection in Bitdefender BOX v1 and Insecure Update Mechanism Vulnerability in libboxhermes.so in Bitdefender BOX v1

A vulnerability classified as critical was found in SoftEther VPN 5.02.5187. Affected by this vulnerability is the function CheckNetworkAcceptThread of the file Command.c. The manipulation leads to use after free. This vulnerability is known as CVE-2025-25568. The attack needs to be done within the local network. There is no exploit available.

A vulnerability classified as critical has been found in SoftEther VPN 5.02.5187. Affected is the function UniToStrForSingleChars of the file Internat.c. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2025-25567. The attack can only be initiated within the local network. There is no exploit available.

A vulnerability was found in Schneider Electric EcoStruxure Power Automation System User Interface. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authentication. The identification of this vulnerability is CVE-2025-0813. It is possible to launch the attack on the physical device. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Schneider Electric WebHMI. It has been declared as very critical. This vulnerability affects unknown code. The manipulation leads to insecure default initialization of resource. This vulnerability was named CVE-2025-1960. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

За полтора месяца 45 компаний выбрали новый межсетевой экран PT NGFW.

87% of companies have, or are in the midst of, rolling out passkeys with goals tied to improved user experience, enhanced security, and compliance, according to the FIDO Alliance. Key findings Enterprises understand the value of passkeys for workforce sign-ins. Most decision makers (87%) report deploying passkeys at their companies. Of these, 47% report rolling out a mix of device-bound passkeys (on physical security keys and/or cards) and synced passkeys (synced securely across the user’s … More →

The post Goodbye passwords? Enterprises ramping up passkey adoption appeared first on Help Net Security.

A vulnerability classified as problematic has been found in fastapi-admin 0.1.4. Affected is an unknown function of the component Create Product Handler. The manipulation of the argument Product Name leads to cross site scripting. This vulnerability is traded as CVE-2024-42816. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Music Request Manager Plugin up to 1.3 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-6019. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Gixaw Chat Plugin up to 1.0 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2024-7816. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in ILC Thickbox Plugin up to 1.0 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Setting Handler. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2024-7820. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Misiek Paypal Plugin up to 1.1.20090324 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2024-7861. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Simple Headline Rotator PLugin up to 1.0 on WordPress. This affects an unknown part. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2024-7860. It is possible to initiate the attack remotely. There is no exploit available.

智能模糊测试综述:问题探索和方法分类 by ourren

更多最新文章，请访问SecWiki

长时间玩游戏并不意味着生活、情绪或心理健康出现了问题。英国牛津大学的研究人员调查了 703 名美国成年人长时间玩任天堂 Switch 游戏对幸福感的影响，这些玩家在 150 款游戏中玩了超过 140,000 小时。分析显示，游戏时长并不能预测心理健康、情绪或生活满意度。但游戏如何融入生活则与玩家的心理健康相关。