Oracle Business Intelligence Enterprise Edition (OAS 7.0) (January 2025 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 7.0.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2025 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product o...

Oracle Business Intelligence Publisher 7.0 / 7.6 (OAS) (January 2025 CPU)

The versions of Oracle Business Intelligence Publisher OAS installed on the remote host are affected by a vulnerability as referenced in the January 2025 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Development Operations Spring Framework...

Oracle Business Intelligence Enterprise Edition (OAS 7.6) (January 2025 CPU)

The version of Oracle Business Intelligence Enterprise Edition OAS 7.6.0.0 installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2025 CPU advisory, including the following: - Vulnerability in the Oracle Business Intelligence Enterprise Edition product o...

Wordfence Intelligence Weekly WordPress Vulnerability Report (January 13, 2025 to January 19, 2025)

Did you know Wordfence runs aBug Bounty Program for all WordPress plugins and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...

CVE-2025-23006

creationtimestamp| type| source ---|---|--- 2025-01-23 09:24:00+00:00| seen| https://thehackernews.com/2025/01/sonicwall-urges-immediate-patch-for.html 2025-01-23 09:32:14+00:00| seen| https://infosec.exchange/users/zeljkazorz/statuses/113876974535447292 2025-01-23 09:53:45+00:00| seen|...

Vulnerabilities fixed in Oracle Analytics

Oracle has fixed vulnerabilities in Oracle Analytics products, such as Business Intelligence, Analytics Desktop and BI Publisher. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or gain access to sensitive data. Oracle has released updates to fix the...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools relates to the disclosure of system data within the controlled area by unauthorized parties, allowing attackers to expose protected information.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the fact that it allows unauthorized parties to access system data within the controlled area. Exploiting this vulnerability could enable attackers to disclose protected information remotely...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools, related to the use of cryptographic algorithms containing defects, allows attackers to gain unauthorized access to protected information.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools lies in its inadequate error reporting mechanism, allowing attackers to gain unauthorized access to protected information.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability could allow unauthorized actors to gain unauthorized access to protected information...

DoNot Team Linked to New Tanzeem Android Malware Targeting Intelligence Collection

The Threat actor known as DoNot Team has been linked to a new Android malware as part of highly targeted cyber attacks. The artifacts in question, named Tanzeem meaning "organization" in Urdu and Tanzeem Update, were spotted in October and December 2024 by cybersecurity company Cyfirma. The apps ...

Cybersecurity 2025: Qualys’ Predictions for Navigating the Evolving Threat Landscape

Cybersecurity in 2024 was a year of contrasts—marked by rising threats and groundbreaking innovations. The surge in ransomware attacks and exploitation of vulnerabilities exposed weaknesses in core systems and software, while the rapid adoption of AI tools brought both risks and opportunities to...

WordPress AI Responsive Gallery Album plugin <= 1.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin AI Responsive Gallery Album versions = 1.4...

FBI Deletes PlugX Malware from Thousands of Computers

According to a DOJ press release, the FBI was able to delete the Chinese-used PlugX malware from "approximately 4,258 U.S.-based computers and networks." Details: To retrieve information from and send commands to the hacked machines, the malware connects to a command-and-control server that is...

A New Jam-Packed Biden Executive Order Tackles Cybersecurity, AI, and More

US president Joe Biden just issued a 40-page executive order that aims to bolster federal cybersecurity protections, directs government use of AI—and takes a swipe at Microsoft’s dominance...

IBM Concert Information Disclosure Vulnerability (CNVD-2025-29675)

IBM Concert is a generative artificial intelligence-driven automated application management and monitoring tool based on the watsonx platform released in May 2024 by IBM. IBM Concert suffers from an information disclosure vulnerability that stems from the disclosure of sensitive system informatio...

CVE-2025-0500

creationtimestamp| type| source ---|---|--- 2025-01-15 19:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsi3evqzb2h 2025-01-15 19:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfsk5jn72q2k 2025-01-15 20:59:21+00:00| seen|...

DRUPAL-CONTRIB-2025-003

The Drupal AI module provides a framework for easily integrating Artificial Intelligence on any Drupal site using any kind of AI from multiple vendors. The sub-modules AI Chatbot and AI Assistants API allow users to interact with the Drupal site via a 'chat' interface. The AI Chatbot module doesn...

Blockchain in cybersecurity: opportunities and challenges

Cybersecurity is facing new challenges with advances in AI, cloud tech, and increasing cyber threats. Solutions like blockchain…...

Russia-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware

Russia-linked threat actors have been attributed to an ongoing cyber espionage campaign targeting Kazakhstan as part of the Kremlin's efforts to gather economic and political intelligence in Central Asia. The campaign has been assessed to be the work of an intrusion set dubbed UAC-0063 , which...

CVE-2025-0060

SAP BusinessObjects Business Intelligence Platform allows an authenticated user with restricted access to inject malicious JS code which can read sensitive information from the server and send it to the attacker. The attacker could further use this information to impersonate as a high privileged...