Applying security fundamentals to AI: Practical advice for CISOs

What to know about the era of AI The first thing to know is that AI isn’t magic The best way to think about how to effectively use and secure a modern AI system is to imagine it like a very new, very junior person. It’s very smart and eager to help but can also be extremely unintelligent. Like a...

[SECURITY] Fedora 44 Update: easyrpg-player-0.8.1.1-5.fc44

EasyRPG Player is a game interpreter for RPG Maker 2000/2003 and EasyRPG game s. To play a game, run the "easyrpg-player" executable inside a RPG Maker 2000/2003 game project folder same place as RPGRT.exe...

EUVD-2021-17673

Malware in sbrugna...

EUVD-2020-12081

Malware in sbrugna...

CVE-2021-30756

A local attacker may be able to view Now Playing information from the lock screen. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6. A privacy issue in Now Playing was addressed with improved permissions...

CVE-2020-1201

An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows Now Playing Session Manager Elevation of Privilege Vulnerability'...

Malicious code in rubylove-playing-cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ruby-playing_cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7019 Malicious code in rubylove-playing-cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7004 Malicious code in playing-cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in playing-cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-21480

Memory corruption while playing audio file having large-sized input buffer...

Overworld secures $10M for cross-platform ARPG development

By Owais Sultan Debut Title Overworld Designed Around Multiplayer Role-Playing Action. This is a post from HackRead.com Read the original post: Overworld secures $10M for cross-platform ARPG development...

[SECURITY] Fedora 38 Update: mingw-gstreamer1-1.22.7-1.fc38

GStreamer is a streaming-media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plug-in-based architecture means that new data types...

playing-mobile.de Cross Site Scripting vulnerability OBB-3293410

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

playing-arts.de Cross Site Scripting vulnerability OBB-2485686

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PreMid has an unspecified vulnerability

PreMid is a simple, configurable utility from the German company PreMid. PreMiD version 2.2.0 contains a security vulnerability that could be exploited by an attacker to receive events from a socket and send them to a socket, thereby interfering with the victim's "Now Playing" state on Discord...

CVE-2021-46701

PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's "now playing" status on Discord...

Code injection

PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's "now playing" status on Discord...

CVE-2021-46701

PreMiD 2.2.0 contains a vulnerability where the websocket transport can be abused to receive events from a socket and emit events to a socket, enabling unintended access and potentially interfering with the victim’s Discord Now Playing status. Affected component: PreMiD’s websocket handling. Root...