RosarioSIS 6.7.2 - Cross Site Scripting (XSS)
RosarioSIS 6.7.2 - Cross-Site Scripting (XSS)
De multiples vulnérabilités ont été découvertes dans Python. Elles permettent à un attaquant de provoquer un déni de service à distance.
PluckCMS 4.7.10 - Unrestricted File Upload
openSIS Community Edition 8.0 - SQL Injection
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
De multiples vulnérabilités ont été découvertes dans Google Pixel. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Cloudflare offers protection against a new high profile vulnerability for React Server Components: CVE-2025-55182. All WAF customers are automatically protected as long as the WAF is deployed.
Django 5.1.13 - SQL Injection
phpMyFaq 2.9.8 - Cross Site Request Forgery (CSRF)
Kroll suffered an identity theft incident, resulting in the potential misuse of customer information. The company is offering complimentary identity monitoring services to affected individuals. Customers are advised to place a fraud alert and consider a security freeze on their credit files.
phpMyFAQ 2.9.8 - Cross-Site Request Forgery(CSRF)
phpMyFAQ 2.9.8 - Cross-Site Request Forgery (CSRF)
Le musée Phoenix, le plus grand du sud-ouest des États-Unis, a subi une attaque par rançongiciel de la part du groupe 'Rhysida', entraînant la fuite de données personnelles incluant des noms et numéros de sécurité sociale. L'accès non autorisé a débuté le 3 décembre 2025, affectant huit personnes ré...
MaNGOSWebV4 4.0.6 - Reflected XSS
In episode 79 of The AI Fix, Gemini 3 roasts the competition, scares Nvidia, and can’t remember what year it is. Meanwhile, Graham investigates a fight between a fridge and robot, and Mark discovers that poetry could be a universal jailbreak for LLMs.
Also in this episode, our hosts ponder whethe...
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in memory disclosure, denial of service or privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed in version 4.17.5+72-g01140da4e8-1.
Two security vulnerabilities were discovered in the Containerd container runtime, which may result in denial of service or local privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed in version 1.6.20~ds1-1+deb12u2.
The Korean National Police have arrested four individuals suspected of hacking over 120,000 IP cameras across the country and then selling stolen footage to a foreign adult site. [...]
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Android Framework flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added Android Framework flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the...