نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
AWS Security Bulletins

CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

Bulletin ID: 2026-165-AWS Publication Date: 11/03/2026 10:00 AM PST Description: Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 allows remote authenticated users to elevate their privileges. We recommend you upgrade to Babelfish for PostgreSQL extension versions Please refer to the article below for the most up-to-date and complete information…

آسیب‌پذیری و روز صفر پایگاه داده رایانش ابری
خواندن متن کامل در AWS Security Bulletins درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CSO Online

UK organisations warned to brace for AI-powered ransomware attacks

AI-powered malware is “highly likely” to be used in ransomware attacks on Britain’s critical national infrastructure within the next two years. The head of GCHQ’s National Cyber Security Centre, Dr. Richard Horne, warned that abuse of AI technologies is making it much easier for attackers to rapidly expose and exploit long-neglected security weaknesses. Dr. Horne argued that underinvestment in technology and security…

بدافزار و آلودگی آسیب‌پذیری و روز صفر فیشینگ
منبع
Ubuntu Security Notices

USN-8980-1: DMitry vulnerabilities

It was discovered that DMitry incorrectly handled long arguments, leading to a stack-based buffer overflow. An attacker could possibly use this issue to cause DMitry to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-7938) It was discovered that DMitry incorrectly handled long lines in WHOIS responses, leading to a stack-based buffer overflow. A remote attacker could possibly us…

آسیب‌پذیری و روز صفر بات‌نت و DDoS
منبع
Ubuntu Security Notices

USN-8977-1: BitlBee vulnerabilities

It was discovered that BitlBee incorrectly handled file transfer connections that expired when built with libpurple. A remote attacker could possibly use this issue to cause BitlBee to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2016-10188) It was discovered that BitlBee incorrectly handled file transfer requests for contacts that were not in the contact list. A remote attacker c…

آسیب‌پذیری و روز صفر
منبع