985 matches found
WordPress Cookie Notice & Compliance for GDPR / CCPA plugin <= 2.5.8 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Cookie Notice & Compliance for GDPR / CCPA versions = 2.5.8...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987696)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987696 advisory. In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass actlen in usbbulkmsg error path syzbot reported that actlen in...
CVE-2025-10869
Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...
EUVD-2025-34610
Stored Cross-site Scripting XSS in Oct8ne Chatbot v2.3. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by injecting a malicious payload through the creation of a transcript that is sent by email. This vulnerability can be exploited to steal sensitive user...
California just put people back in control of their data
California's 2025 legislative session closed with 14 new privacy and AI-related bills. We’d like to highlight a few of the most relevant signed bills and encourage other states and countries to follow California’s example. Let’s go over some of the bills that were signed by the governor and how...
EUVD-2020-7242
Malware in sbrugna...
EUVD-2006-0381
Malware in sbrugna...
EUVD-2017-9091
Malware in sbrugna...
EUVD-2007-6518
Malware in sbrugna...
EUVD-2020-10587
Malware in sbrugna...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-391512)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-391512 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookupatid The lookupatid function can return NULL if the ATID i...
EUVD-2025-26559
Malicious code in bioql PyPI...
EUVD-2024-21926
Malicious code in bioql PyPI...
EUVD-2025-28179
Malicious code in bioql PyPI...
CERTFR-2025-ACT-041
creationtimestamp| type| source ---|---|--- 2025-09-29 12:13:16+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lzxybqnsqu2o 2025-09-29 13:00:57+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3lzy2wyuzsc2o...
U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack
Law enforcement authorities in the U.K. have arrested two teen members of the Scattered Spider hacking group in connection with their alleged participation in an August 2024 cyber attack targeting Transport for London TfL, the city's public transportation agency. Thalha Jubair aka EarthtoStar,...
“A dare, a challenge, a bit of fun:” Children are hacking their own schools’ systems, says study
As if ransomware wasn’t enough of a security problem for the sector, educational institutions also need to worry about their own students, a recent study shows. Last week, the UK Information Commissioner’s Office ICO published a report about the "insider threat of students". Here are a few key...
Lawsuit About WhatsApp Security
Attaullah Baig, WhatsApp's former head of security, has filed a whistleblower lawsuit alleging that Facebook deliberately failed to fix a bunch of security flaws, in violation of its 2019 settlement agreement with the Federal Trade Commission. The lawsuit, alleging violations of the whistleblower...
DORA Compliance in the Cloud Era: Insights from Deloitte and Wiz
How to address DORA compliance challenges with Wiz and Deloitte...
CVE-2024-48341: Cross-Site Request Forgery (CSRF)
dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/doAdminAction.php?act=addShop...