985 matches found
CVE-2025-58607
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GDPR Info Cookie Notice & Consent Banner for GDPR & CCPA Compliance cookie-notice-and-consent-banner allows Stored XSS.This issue affects Cookie Notice & Consent Banner for GDPR & CCPA Compliance:...
net/sched: act_mirred: don't override retval if we already lost the skb
...
net/sched: act_mirred: use the backlog for mirred ingress
...
CVE-2025-58607
CVE-2025-58607 is a stored XSS in the WordPress plugin “Cookie Notice & Consent Banner for GDPR & CCPA Compliance” (versions
“No place in our networks”: FCC hangs up on thousands of voice operators in robocall war
Everyone hates robocalls. However, it's difficult to track down all the scammers and spammers that make them, so the Federal Communications Commission FCC has taken another approach: it just disconnected over a thousand voice operators from the public telephone network for not doing their part to...
Google Android Memory Misreference Vulnerability (CNVD-2025-19920)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a memory misreference vulnerability that originates from a mix-up in avctlcbact.cc in the avctlcbmsgind instruction responsible for freeing memory, which can be exploited by an attacker to elevat...
U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback
The U.K. government has apparently abandoned its plans to force Apple to weaken encryption protections and include a backdoor that would have enabled access to the protected data of U.S. citizens. U.S. Director of National Intelligence DNI Tulsi Gabbard, in a statement posted on X, said the U.S...
CVE-2025-7734
An issue has been discovered in GitLab CE/EE affecting all versions from 14.2 before 18.0.6, 18.1 before 18.1.4 and 18.2 before 18.2.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content...
Malicious code in ccpa-jurisdiction-sdk (npm)
The package ccpa-jurisdiction-sdk was found to contain malicious code...
CVE-2025-7734
Removed by vendor...
“The worst thing” for online rights: An age-restricted grey web (Lock and Code S06E16)
This week on the Lock and Code podcast … The internet is cracking apart. It’s exactly what some politicians want. In June, a Texas law that requires age verification on certain websites withstood a legal challenge brought all the way to the US Supreme Court. It could be a blueprint for how the...
CERTFR-2025-ACT-032
creationtimestamp| type| source ---|---|--- 2025-08-04 12:46:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lvl7z56ibm26 2025-08-04 16:38:31+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3lvlmyiagdq2c...
VPN use rises following Online Safety Act’s age verification controls
As the UK's Online Safety Act came into effect on Friday—along with its age verification controls—the use of virtual private network VPN services has skyrocketed by up to 20-fold across the region. Top10VPN, which monitors VPN traffic around the world, spotted UK VPN traffic spiking 1,327% on Jul...
VPN use rises following Online Safety Act’s age verification controls
As the UK's Online Safety Act came into effect on Friday—along with its age verification controls—the use of virtual private network VPN services has skyrocketed by up to 20-fold across the region. Top10VPN, which monitors VPN traffic around the world, spotted UK VPN traffic spiking 1,327% on Jul...
Secure Vibe Coding: The Complete New Guide
DALL-E for coders? That's the promise behind vibe coding, a term describing the use of natural language to create software. While this ushers in a new era of AI-generated code, it introduces "silent killer" vulnerabilities: exploitable flaws that evade traditional security tools despite perfect...
Data Breach Reporting for regulatory requirements with Microsoft Data Security Investigations
Seventy-four percent of organizations surveyed experienced at least one data security incident with their business data exposed in the previous year as reported in Microsoft’s Data Security Index: Trends, insights, and strategies to secure data report. Despite the best people, process and...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: Do not override retval if we have already lost the skb. If we are redirecting the skb, and have not yet called tcfmirredforward, we need to inform the kernel to discard the skb by setting the retcode to SHOT...
WordPress plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
Porn sites probed for allegedly failing to prevent minors from accessing content
Four porn sites are being investigated by the European Commission under its Digital Services Act DSA for allegedly failing to verify its users' ages properly. The Commission, which drafts and enforces the European Union's laws, is focusing the lens on Pornhub, Stripchat, XNXX, and XVideos with th...
kernel: net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
In the Linux kernel, the following vulnerability has been resolved: net/usb: kalmia: Don't pass actlen in usbbulkmsg error path syzbot reported that actlen in kalmiasendinitpacket is uninitialized when passing it to the first usbbulkmsg error path. Jiri Pirko noted that it's pointless to pass it ...