The China-linked cyber espionage group tracked as Lotus Panda has been attributed to a campaign that compromised multiple organizations in…
Development
In this tutorial, we will learn how to harness the power of Dappier AI, a suite of real-time search and…
Starting a SaaS (Software as a Service) business is exciting. You’ve put in the long hours building something you believe…
The Internet Protocol version 4 (IPv4) is one of the core protocols of standards-based internetworking methods in the Internet and…
Since its founding 19 years ago as a pioneering collaboration with Portuguese universities, research institutions and corporations, the MIT-Portugal Program…
We’re proud to share that Perficient has been honored with a Globee® Gold Award for Customer Excellence: Achievement in Customer…
As the field of artificial intelligence (AI) continues to evolve at a rapid pace, new research has found how techniques…
Nation-state threat actors are using generative AI tools to refine their attack techniques, but they aren’t yet using GenAI to…
He’s not a pop star, but Jeffrey Bowie is alleged to have toured staff areas of a hospital in Oklahoma,…
We are excited to announce the availability of new features in AWS Database Migration Service (AWS DMS) replication engine version…
Deploying large language model (LLM)-based agents in production settings often reveals critical reliability issues. Accurately identifying the causes of agent…
As generative AI revolutionizes industries, organizations are eager to harness its potential. However, the journey from production-ready solutions to full-scale…
With the advent of generative AI solutions, a paradigm shift is underway across industries, driven by organizations embracing foundation models…
Amazon Q Business is a generative AI-powered assistant that answers question, provides summaries, generates content, and securely completes tasks based…
Sparse attention is emerging as a compelling approach to improve the ability of Transformer-based LLMs to handle long sequences. This…
Large language models can generate fluent responses, emulate tone, and even follow complex instructions; however, they struggle to retain information…
Multimodal foundation models have shown substantial promise in enabling systems that can reason across text, images, audio, and video. However,…
Amazon Bedrock Model Distillation is generally available, and it addresses the fundamental challenge many organizations face when deploying generative AI:…
Critical vulnerability in SAP NetWeaver enables malicious file uploads
Adversaries can exploit CVE-2025-31324 to upload web shells and other unauthorized files to execute on the SAP NetWeaver server April 30, 2025Red Canary has observed activity exploiting a newly-docume …
Read more
Published Date:
Apr 30, 2025 (3 hours, 38 minutes ago)
Vulnerabilities has been mentioned in this article.
CVE-2025-31324
CVE ID : CVE-2025-46557
Published : April 30, 2025, 7:15 p.m. | 3 hours, 53 minutes ago
Description : XWiki is a generic wiki platform. In versions starting from 15.3-rc-1 to before 15.10.14, from 16.0.0-rc-1 to before 16.4.6, and from 16.5.0-rc-1 to before 16.10.0-rc-1, a user who can access pages located in the XWiki space (by default, anyone) can access the page XWiki.Authentication.Administration and (unless an authenticator is set in xwiki.cfg) switch to another installed authenticator. Note that, by default, there is only one authenticator available (Standard XWiki Authenticator). So, if no authenticator extension was installed, it’s not really possible to do anything for an attacker. Also, in most cases, if an SSO authenticator is installed and utilized (like OIDC or LDAP for example), the worst an attacker can do is break authentication by switching back to the standard authenticator (that’s because it’s impossible to login to a user which does not have a stored password, and that’s usually what SSO authenticator produce). This issue has been patched in versions 15.10.14, 16.4.6, and 16.10.0-rc-1.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more…