708 matches found
CVE-2025-43399
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1. An app may be able to access protected user data...
Node.js: Timeout-based race conditions make Uint8Array/Buffer.alloc non-zerofilled
A flaw in Node.js's buffer allocation logic was discovered, where buffers allocated with Buffer.alloc and other TypedArray instances like Uint8Array may contain leftover data from previous operations under specific timing conditions...
CVE-2025-62592
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...
CVE-2025-53036
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: Platform. Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated attacker with...
EUVD-2025-35576
A SQL Injection vulnerability exists in Esri ArcGIS Server versions 11.3, 11.4 and 11.5 on Windows, Linux and Kubernetes. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary SQL commands via a specific ArcGIS Feature Service operation. Successful exploitation can...
Oracle Java SE 安全漏洞
Oracle Java SE is an Oracle Corporation for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, which originates from an...
Cisco TelePresence Collaboration Endpoint Software 日志信息泄露漏洞
Cisco TelePresence Collaboration Endpoint Software is a suite of collaboration endpoint software from Cisco. A log information disclosure vulnerability exists in Cisco TelePresence Collaboration Endpoint Software, which stems from unencrypted credentials being stored when logging is enabled for t...
Modeling scams see mature models as attractive new prospects
The BBC reported on modeling scams targeting older models. Modeling scams aren't new, but it’s worth looking at how they spread today, how to spot them, and—most importantly—how to avoid falling victim to them. The classic pitch goes like this: Someone walks up to you in the street and says, "You...
EUVD-2021-16536
Malware in sbrugna...
EUVD-2014-6016
Malware in sbrugna...
EUVD-2021-16543
Malware in sbrugna...
EUVD-2014-7197
Malware in sbrugna...
EUVD-2020-16694
Malware in sbrugna...
EUVD-2015-5830
Malware in sbrugna...
EUVD-2012-5842
Malware in sbrugna...
EUVD-2020-25861
Malware in sbrugna...
EUVD-2020-28119
Malware in sbrugna...
EUVD-2017-2056
Malware in sbrugna...