41818 matches found
CVE-2024-56347
IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls...
CVE-2024-56347 IBM AIX command execution
IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls...
CVE-2024-56347 IBM AIX command execution
IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due to improper process controls...
CVE-2024-56347
IBM AIX nimsh service SSL/TLS implementations (CVE-2024-56347) affect AIX 7.2 and 7.3 (also VIOS 3.1/4.1). Root cause: improper process controls in nimsh allow remote command execution. Impact is remote, unauthenticated access with high/critical severity in the CVSS vector (network, none/low comp...
AI innovation requires AI security: Hear whatâs new at Microsoft Secure
When youâre secureâinnovation happens. But, the fast pace of AI often outpaces traditional security measures, leaving gaps that bad actors can take advantage of. As a security professional, youâre the hero in this battle between protecting vast amounts of data while ensuring AI systems remain...
CVE-2025-30107
On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery...
How to Permanently and Securely Delete Photos from an iPhone
Do you need to permanently and securely delete photos from an iPhone to prevent unauthorized access? Simply deletingâŚ...
Forvia Hella HELLA Driving Recorder DR 820 ĺŽĺ ¨ćźć´
Forvia Hella HELLA Driving Recorder DR 820 is a driving recorder from Forvia. The Forvia Hella HELLA Driving Recorder DR 820 suffers from a security vulnerability that originates from an unauthorized user being able to access sensitive user and vehicle information through the settings interface...
IROAD V Series ĺŽĺ ¨ćźć´
IROAD V Series is a series of car recorders from IROAD. A security vulnerability exists in IROAD V Series that stems from improper configuration management of the CarLogger, which allows an unauthorized user to modify settings, disable critical functions and turn off battery protection, potential...
The vulnerability of Siemens Industrial Edge Managementâs centralized control platform for industrial peripheral applications and devices lies in the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.
The vulnerability of the platform for centralized management of industrial peripheral applications and Siemens Industrial Edge Management devices is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...
CVE-2025-30107
On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery...
CVE-2025-30138
An issue was discovered on G-Net Dashcam BB GONX devices. Managing Settings and Obtaining Sensitive Data and Sabotaging Car Battery can be performed by unauthorized persons. It allows unauthorized users to modify critical system settings once connected to its network. Attackers can extract...
The vulnerability of the Fortinet FortiNAC access control device lies in the lack of measures taken at the management level to protect data. This allows attackers to copy local device files into local directories.
The vulnerability of the Fortinet FortiNAC network access control device is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability allows a malicious actor to copy device local files into local directories by connecting to the tcp/5555 port...
CVE-2025-30107
The CVE-2025-30107 entry concerns IROAD V9 dashcam devices, where a vulnerability in the configuration management of the dashcam allows unauthorized users to modify settings, disable critical functions, and turn off battery protection, potentially causing physical damage to the vehicle. Affected ...
Malicious Code Hits âtj-actions/changed-filesâ in 23,000 GitHub Repos
GitHub security alert: Malicious code found in âtj-actions/changed-files,â impacting 23K+ repos. Learn how to check, remove, and protectâŚ...
SANS Institute Warns of Novel Cloud-Native Ransomware Attacks
The latest Palo Alto Networks Unit 42 Cloud Threat Report found that sensitive data is found in 66% of cloud storage buckets. This data is vulnerable to ransomware attacks. The SANS Institute recently reported that these attacks can be performed by abusing the cloud provider's storage security...
FileCloud ĺŽĺ ¨ćźć´
FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. offering industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. A security vulnerability exists in FileCloud version v23.241.2, whic...
The vulnerability of the web interface of the IBM Sterling B2B Integrator software allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.
The vulnerability of the web interface of the IBM Sterling B2B Integrator software solution relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain unauthorized access to protected...
The vulnerability of the web interface of the IBM Sterling B2B Integrator software allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.
The vulnerability of the web interface of the IBM Sterling B2B Integrator software solution relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain unauthorized access to protected...
The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE arises from the lack of proper input validation when requesting external server authentication. This allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE stems from the lack of proper input sanitization when requesting external server authentication. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...