4639 matches found
CVE-2024-42212 HCL BigFix Compliance is affected by an improper or missing SameSite attribute
HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery CSRF attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions...
CVE-2024-42212 HCL BigFix Compliance is affected by an improper or missing SameSite attribute
HCL BigFix Compliance is affected by an improper or missing SameSite attribute. This can lead to Cross-Site Request Forgery CSRF attacks, where a malicious site could trick a user's browser into making unintended requests using authenticated sessions...
Deep-Live-Cam - Real Time Face Swap And One-Click Video Deepfake With Only A Single Image
Real-time face swap and video deepfake with a single click and only a single image. Disclaimer This deepfake software is designed to be a productive tool for the AI-generated media industry. It can assist artists in animating custom characters, creating engaging content, and even using models for...
HCL BigFix Compliance 安全漏洞
HCL BigFix Compliance is a continuous monitoring and application of endpoint security settings by HCL India to ensure compliance with regulatory or organizational security policies. A security vulnerability exists in HCL BigFix Compliance that stems from missing or improper SameSite attributes,...
HCL BigFix Compliance 安全漏洞
HCL BigFix Compliance is a continuous monitoring and application of endpoint security settings by HCL India to ensure compliance with regulatory or organizational security policies. HCL BigFix Compliance has a security vulnerability that stems from temporary files not being handled properly, whic...
PT-2025-19773 · Hcl · Hcl Bigfix Compliance
Name of the Vulnerable Software and Affected Versions: HCL BigFix Compliance affected versions not specified Description: The issue concerns the inclusion of temporary files left in the production environment. An attacker might gain access to these files by indexing or retrieving them via...
Encrypted Federated Search Using Homomorphic Encryption
The sharing of information between agencies is effective in dealing with cross-jurisdictional criminal activities; however, such sharing is often restricted due to concerns about data privacy, ownership, and compliance. Towards this end, this work has introduced a privacy-preserving federated...
PT-2025-19760 · Hcl · Hcl Bigfix Compliance
Name of the Vulnerable Software and Affected Versions: HCL BigFix Compliance affected versions not specified Description: The issue is related to an improper or missing SameSite attribute, which can lead to Cross-Site Request Forgery CSRF attacks. A malicious site could trick a user's browser int...
TikTok Slammed With €530 Million GDPR Fine for Sending E.U. Data to China
Ireland's Data Protection Commission DPC on Friday fined popular video-sharing platform TikTok €530 million $601 million for infringing data protection regulations in the region by transferring European users' data to China. "TikTok infringed the GDPR regarding its transfers of EEA European...
Bolster Your Regulatory Compliance with Layered Security Measures
...
[SECURITY] Fedora 41 Update: firefox-138.0-1.fc41
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
@cloudflare/workers-oauth-provider PKCE bypass via downgrade attack
Summary PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework. However, it was found that an attacker could cause the check to be skipped. Impact PKCE is a defense-in-depth mechanism against certain kinds of attacks and was an optional extension ...
CVE-2025-23161
In the Linux kernel, the following vulnerability has been resolved: PCI: vmd: Make vmddev::cfglock a rawspinlockt type The access to the PCI config space via pciops::read and pciops::write is a low-level hardware access. The functions can be accessed with disabled interrupts even on PREEMPTRT. Th...
[SECURITY] Fedora 42 Update: firefox-138.0-1.fc42
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
GHSA-864F-7XJM-2JP2 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime, rke2-runtime-fips...
Generative AI in Financial Institution: a Global Survey of Opportunities, Threats, and Regulation
Generative Artificial Intelligence GenAI is rapidly reshaping the global financial landscape, offering unprecedented opportunities to enhance customer engagement, automate complex workflows, and extract actionable insights from vast financial data. This survey provides an overview of GenAI adopti...
The vulnerability of the Delphix Continuous Data and Delphix Continuous Compliance data management tools lies in improper privilege assignment, allowing attackers to gain control over the command line of the operating system.
The vulnerability of the Delphix Continuous Data data management software is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to gain control over the command line of the operating system...
Faster, more personalized service begins at the frontline with Microsoft Intune
In healthcare, patient trust often begins at the frontline with people who deliver care, respond to questions, and manage crucial in-the-moment decisions. Increasingly, those experiences are shaped by the tools frontline workers use. When devices are secure, responsive, and tailored to clinical...
Steering the CensorShip: Uncovering Representation Vectors for LLM "Thought" Control
Large language models LLMs have transformed the way we access information. These models are often tuned to refuse to comply with requests that are considered harmful and to produce responses that better align with the preferences of those who control the models. To understand how this "censorship...
