[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox
📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> CVE-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:36]
Information published.
> CVE-2025-12638 Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:02]
Information published.
> The Browser Defense Playbook: Stopping the Attacks That Start on Your Screen
[SOURCE] Palo Alto Unit 42 [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
85% of daily work occurs in the browser. Unit 42 outlines key security controls and strategies to make sure yours is secure. The post The Browser Defense Playbook: Stopping the Attacks That Start on Your Screen appeared first on Unit 42.
> CVE-2025-38643 wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:02]
Information published.
> CVE-2025-58436 OpenPrinting CUPS slow client can halt cupsd, leading to a possible DoS attack
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:01]
Information published.
> Russia Wants This Mega Missile to Intimidate the West, but It Keeps Crashing
[SOURCE] Wired Security [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
One of Vladimir Putin’s favorite sabers to rattle seems to have lost its edge.
> CVE-2025-61915 OpenPrinting CUPS vulnerable to stack based out-of-bound write
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:01]
Information published.
> CVE-2025-66221 Werkzeug safe_join() allows Windows special device names
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:01]
Information published.
> [webapps] MobileDetect 2.8.31 - Cross-Site Scripting (XSS)
[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
MobileDetect 2.8.31 - Cross-Site Scripting (XSS)
> CVE-2022-24736 A Malformed Lua script can crash Redis
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:01]
Information published.
> CVE-2022-24735 Lua scripts can be manipulated to overcome ACL rules in Redis
[SOURCE] Microsoft Security Update Guide [LANGUAGE: EN] [DATE: 2025-12-03 01:01]
Information published.
> [webapps] phpIPAM 1.4 - SQL-Injection
[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
phpIPAM 1.4 - SQL-Injection
> [webapps] OpenRepeater 2.1 - OS Command Injection
[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
OpenRepeater 2.1 - OS Command Injection
> Multiples vulnérabilités dans Python (03 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-03 00:00]
De multiples vulnérabilités ont été découvertes dans Python. Elles permettent à un attaquant de provoquer un déni de service à distance.
> [webapps] phpMyAdmin 5.0.0 - SQL Injection
[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
phpMyAdmin 5.0.0 - SQL Injection
> [webapps] RosarioSIS 6.7.2 - Cross Site Scripting (XSS)
[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
RosarioSIS 6.7.2 - Cross Site Scripting (XSS)
> Multiples vulnérabilités dans Google Chrome (03 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-03 00:00]
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
> [webapps] RosarioSIS 6.7.2 - Cross-Site Scripting (XSS)
[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
RosarioSIS 6.7.2 - Cross-Site Scripting (XSS)
> [webapps] PluckCMS 4.7.10 - Unrestricted File Upload
[SOURCE] Exploit-DB [LANGUAGE: EN] [DATE: 2025-12-03 00:00]
PluckCMS 4.7.10 - Unrestricted File Upload
> Multiples vulnérabilités dans Google Pixel (03 décembre 2025)
[SOURCE] CERT-FR [LANGUAGE: FR] [DATE: 2025-12-03 00:00]
De multiples vulnérabilités ont été découvertes dans Google Pixel. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.