Whalers Blog

  • Blog
  • About
  • Admin
  • Categories
  • Contact
    • X
    • Telegram
    • Mastodon
    • Bluesky
  • June 5, 2025

    Building a Trusted Community

    Building a Trusted Community of Innovators! Hey everyone,Are you a developer who loves crafting elegant solutions? A DevOps engineer passionate about seamless pipelines and automation? Or a security engineer dedicated to safeguarding the digital world? If you answered yes, then this message is for you.In our fast-paced tech landscape, the tools and technologies are constantly…

    General
  • June 12, 2025

    CVE-2025-49579 – Citizen is a MediaWiki skin that makes extensions

    CVE ID : CVE-2025-49579 Published : June 12, 2025, 7:15 p.m. | 28 minutes ago Description : Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. All system messages in menu headings using the Menu.mustache template are inserted as raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML…

    CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence
    #cve, #cybersecurity, #security
  • June 12, 2025

    CVE-2025-49578 – Citizen is a MediaWiki skin that makes extensions

    CVE ID : CVE-2025-49578 Published : June 12, 2025, 7:15 p.m. | 28 minutes ago Description : Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various date messages returned by `Language::userDate` are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This…

    CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence
    #cve, #cybersecurity, #security
  • June 12, 2025

    CVE-2025-49577 – Citizen is a MediaWiki skin that makes extensions

    CVE ID : CVE-2025-49577 Published : June 12, 2025, 7:15 p.m. | 28 minutes ago Description : Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Various preferences messages are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This vulnerability is fixed…

    CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence
    #cve, #cybersecurity, #security
  • June 12, 2025

    CVE-2025-49576 – Citizen is a MediaWiki skin that makes extensions

    CVE ID : CVE-2025-49576 Published : June 12, 2025, 7:15 p.m. | 28 minutes ago Description : Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. The citizen-search-noresults-title and citizen-search-noresults-desc system messages are inserted into raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This…

    CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence
    #cve, #cybersecurity, #security
  • June 12, 2025

    CVE-2025-49575 – Citizen is a MediaWiki skin that makes extensions

    CVE ID : CVE-2025-49575 Published : June 12, 2025, 7:15 p.m. | 28 minutes ago Description : Citizen is a MediaWiki skin that makes extensions part of the cohesive experience. Multiple system messages are inserted into the CommandPaletteFooter as raw HTML, allowing anybody who can edit those messages to insert arbitrary HTML into the DOM. This…

    CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence
    #cve, #cybersecurity, #security
  • June 12, 2025

    CVE-2025-49081 – There is an insufficient input validation vulnerab

    CVE ID : CVE-2025-49081 Published : June 12, 2025, 6:15 p.m. | 1 hour, 28 minutes ago Description : There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to server version 13.55. Attackers with system administrator permissions can impair the availability of the Secure Access administrative UI by writing invalid…

    CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence
    #cve, #cybersecurity, #security
  • June 12, 2025

    CVE-2025-43866 – vantage6 is an open-source infrastructure for priv

    CVE ID : CVE-2025-43866 Published : June 12, 2025, 6:15 p.m. | 1 hour, 28 minutes ago Description : vantage6 is an open-source infrastructure for privacy preserving analysis. The JWT secret key in the vantage6 server is auto-generated unless defined by the user. The auto-generated key is a UUID1, which is not cryptographically secure as it is…

    CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence
    #cve, #cybersecurity, #security
  • June 12, 2025

    CVE-2025-43863 – vantage6 is an open source framework built to enab

    CVE ID : CVE-2025-43863 Published : June 12, 2025, 6:15 p.m. | 1 hour, 28 minutes ago Description : vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Learning and Multi-Party Computation. If attacker gets access to an authenticated session, they can try to brute-force the user password by…

    CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence
    #cve, #cybersecurity, #security
  • June 12, 2025

    CVE-2025-5982 – GitLab EE IP Access Restriction Bypass Vulnerability

    CVE ID : CVE-2025-5982 Published : June 12, 2025, 5:15 p.m. | 2 hours, 27 minutes ago Description : An issue has been discovered in GitLab EE affecting all versions from 12.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. Under certain conditions users could bypass IP access restrictions and view sensitive information. Severity: 3.7 |…

    CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence
    #cve, #cybersecurity, #security
  • June 12, 2025

    CVE-2025-49080 – “Absolute Secure Access Server Denial of Service Vulnerability”

    CVE ID : CVE-2025-49080 Published : June 12, 2025, 5:15 p.m. | 2 hours, 27 minutes ago Description : There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the…

    CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence
    #cve, #cybersecurity, #security
1 2 3 … 82
Next Page

Designed by Alireza Gharib