869 matches found
CERTFR-2025-ACT-019
creationtimestamp| type| source ---|---|--- 2025-05-05 13:36:33+00:00| seen| https://bsky.app/profile/infosecfr.skyfleet.blue/post/3logifdas742t...
Qt Group Authorized as a CVE Numbering Authority (CNA) by the CVE Program
Qt Group has been authorized by the Common Vulnerabilities and Exposures CVE® Program as a CVE Numbering Authority CNA, covering all Qt products. It is a significant milestone on Qt’s cybersecurity strategy and aligns with our commitment to robust vulnerability management processes and practices...
CERTFR-2025-ACT-012
creationtimestamp| type| source ---|---|--- 2025-03-24 13:38:14+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3ll4uvokpb726 2025-03-24 13:38:16+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114217680501535344 2025-03-25 06:39:14+00:00| seen|...
CVE-2025-2604
A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editact.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The...
SourceCodester Kortex Lite Advocate Office Management System 注入漏洞
SourceCodester Kortex Lite Advocate Office Management System is a SourceCodester open source office management system. An injection vulnerability exists in SourceCodester Kortex Lite Advocate Office Management System version 1.0, which stems from improper manipulation of the ID parameter in the...
kernel: net/sched: act_mirred: use the backlog for mirred ingress
A potential deadlock flaw was found in net/sched/actmirred.c in the Linux kernel. This may lead to compromised Availability...
Countries and companies are fighting at the expense of our data privacy
Data privacy issues are a hot topic in a world where we apparently don’t know who to trust anymore. A few weeks ago, we reported how the UK had secretly ordered Apple to provide blanket access to protected cloud backups around the world. This week, Apple decided to pull the plug on Advanced Data...
SUSE CVE-2022-49066
In the Linux kernel, the following vulnerability has been resolved: veth: Ensure eth header is in skb's linear part After feeding a decapsulated packet to a veth device with actmirred, skbheadlen may be 0. But vethxmit calls devforwardskb, which expects at least ETHHLEN byte of linear data as...
CVE-2022-49183
CVE-2022-49183: Linux kernel net/sched act_ct had a ref-leak when switching zones or network namespaces without a ct clear, leaking the old ct entry due to tcf_ct_skb_nfct_cached() returning false. The fix is to free the ct entry at tcf_ct_skb_nfct_cached() since the ct entry is not reusable. Con...
DORA: Strengthening Digital Resilience Through API Security
The Digital Operational Resilience Act DORA is one of the most significant cybersecurity regulations for financial institutions in the European Union EU. Failure to comply can have massive consequences, including financial penalties and forced operational downtime, meaning achieving DORA complian...
Elon Musk’s DOGE Is Being Sued Under the Privacy Act: What to Know
At least eight ongoing lawsuits related to the so-called Department of Government Efficiency’s alleged access to sensitive data hinge on the Watergate-inspired Privacy Act of 1974. But it’s not airtight...
South Korea Suspends DeepSeek AI Downloads Over Privacy Violations
South Korea has formally suspended new downloads of Chinese artificial intelligence AI chatbot DeepSeek in the country until the service makes changes to its mobile apps to comply with data protection regulations. Downloads have been paused as of February 15, 2025, 6:00 p.m. local time, the...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added a NULL check for the lookupatid function. The lookupatid function may return NULL if the ATID is invalid or does not exist in the identifier table. This could lead to dereferencing a null pointer without any...
CVE-2020-15172
The Act module for Red Discord Bot before commit 6b9f3b86 is vulnerable to Remote Code Execution. With this exploit, Discord users can use specially crafted messages to perform destructive actions and/or access sensitive information. Unloading the Act module with unload act can render this exploi...
WordPress GDPR CCPA Compliance & Cookie Consent Banner plugin <= 2.7.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ngô Thái An in WordPress Plugin GDPR CCPA Compliance Support versions = 2.7.1...
WordPress plugin GDPR CCPA Compliance Support 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
PT-2025-5428 · Ninja Team · Ninjateam Gdpr Ccpa Compliance Support
Name of the Vulnerable Software and Affected Versions: NinjaTeam GDPR CCPA Compliance Support versions 2.7.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...
WordPress plugin Cookie Consent & Autoblock for GDPR/CCPA 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...
PT-2025-4909 · Unknown · Sprucejoy Cookie Consent & Autoblock For Gdpr/Ccpa
Name of the Vulnerable Software and Affected Versions: SpruceJoy Cookie Consent & Autoblock for GDPR/CCPA versions 1.0.1 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended...
