Aggregator

CVE-2010-1719 | Moto-treks Com Mtfireeagle 1.2 index.php controller path traversal (EDB-12233 / Nessus ID 43636)

Vuldb Updates
3 weeks 5 days ago
A vulnerability was found in Moto-treks Com Mtfireeagle 1.2 and classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument controller leads to path traversal. This vulnerability is uniquely identified as CVE-2010-1719. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2010-1600 | Thefactory Com Mediamall 1.0.4 com_media index.php Category sql injection (EDB-12234 / XFDB-57906)

Vuldb Updates
3 weeks 5 days ago
A vulnerability labeled as critical has been found in Thefactory Com Mediamall 1.0.4. This issue affects some unknown processing of the file index.php of the component com_media. The manipulation of the argument Category leads to sql injection. The identification of this vulnerability is CVE-2010-1600. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2010-1491 | Mms.pipp Com Mmsblog 2.3.0 index.php controller path traversal (EDB-12318 / Nessus ID 43636)

Vuldb Updates
3 weeks 5 days ago
A vulnerability, which was classified as problematic, was found in Mms.pipp Com Mmsblog 2.3.0. This issue affects some unknown processing of the file index.php. The manipulation of the argument controller leads to path traversal. The identification of this vulnerability is CVE-2010-1491. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2010-2050 | M0r0n Com Mscomment 0.8.0 index.php controller path traversal (EDB-12611 / Nessus ID 43636)

Vuldb Updates
3 weeks 5 days ago
A vulnerability was found in M0r0n Com Mscomment 0.8.0. It has been classified as problematic. Affected is an unknown function of the file index.php. The manipulation of the argument controller leads to path traversal. This vulnerability is traded as CVE-2010-2050. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2010-1307 | Software.realtyna Com Joomlaupdater 2.0.8 Updater index.php controller path traversal (EDB-12070 / XFDB-57531)

Vuldb Updates
3 weeks 5 days ago
A vulnerability labeled as problematic has been found in Software.realtyna Com Joomlaupdater 2.0.8. This issue affects some unknown processing of the file index.php of the component Updater. The manipulation of the argument controller leads to path traversal. The identification of this vulnerability is CVE-2010-1307. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2010-1495 | Matamko Com Matamko 1.01 index.php controller path traversal (EDB-12286 / BID-39550)

Vuldb Updates
3 weeks 5 days ago
A vulnerability was found in Matamko Com Matamko 1.01. It has been declared as problematic. This affects an unknown part of the file index.php. The manipulation of the argument controller leads to path traversal. This vulnerability is uniquely identified as CVE-2010-1495. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

The AI-Powered Threat: Key Findings from the CrowdStrike Global Threat Report 2025

Penetration Testing Tools - Metepreter.org
3 weeks 6 days ago

CrowdStrike has released its Global Threat Report 2025, documenting a profound shift in the behavior of both cybercriminals and state-sponsored groups. Analysts have described 2024 as “the year of the enterprising adversary”—threat actors are...

The post The AI-Powered Threat: Key Findings from the CrowdStrike Global Threat Report 2025 appeared first on Penetration Testing Tools.

ddos

Google’s New Crypto App Rules: A Game-Changer for a Safer Digital Ecosystem

Penetration Testing Tools - Metepreter.org
3 weeks 6 days ago

Google has introduced a new requirement for developers of cryptocurrency exchange and wallet applications, mandating that they obtain official government licenses prior to publication. The company explains that this initiative is intended to foster...

The post Google’s New Crypto App Rules: A Game-Changer for a Safer Digital Ecosystem appeared first on Penetration Testing Tools.

ddos

CVE-2025-7458 | SQLite up to 3.41.1 SELECT Statement sqlite3KeyInfoFromExprList integer overflow (Nessus ID 249982)

Vuldb Updates
3 weeks 6 days ago
A vulnerability was found in SQLite up to 3.41.1. It has been rated as problematic. Affected by this issue is the function sqlite3KeyInfoFromExprList of the component SELECT Statement Handler. The manipulation leads to integer overflow. This vulnerability is handled as CVE-2025-7458. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-46206 | Artifex mupdf 1.25.5/1.25.6 mutool clean utility /Next strip_outline recursion (Nessus ID 249976)

Vuldb Updates
3 weeks 6 days ago
A vulnerability was found in Artifex mupdf 1.25.5/1.25.6. It has been classified as problematic. Affected is the function strip_outline of the file /Next of the component mutool clean utility. The manipulation leads to uncontrolled recursion. This vulnerability is traded as CVE-2025-46206. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-8534 | libtiff 4.6.0 tiff2ps tools/tiff2ps.c PS_Lvl2page null pointer dereference (Issue 718 / EUVD-2025-23581)

Vuldb Updates
3 weeks 6 days ago
A vulnerability identified as problematic has been detected in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2025-8534. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue. One of the maintainers explains, that "[t]his error only occurs if DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. "rD") option is used."
vuldb.com

CVE-2022-48896 | Linux Kernel up to 5.4.228/5.10.163/5.15.88/6.1.6 ixgbe pci_get_domain_bus_and_slot reference count (Nessus ID 249987)

Vuldb Updates
3 weeks 6 days ago
A vulnerability described as critical has been identified in Linux Kernel up to 5.4.228/5.10.163/5.15.88/6.1.6. Affected by this vulnerability is the function pci_get_domain_bus_and_slot of the component ixgbe. The manipulation leads to improper update of reference count. This vulnerability is known as CVE-2022-48896. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

SDL 84/100问：国内是否有做安全基线的厂商或这个方向的专家？

我的安全视界观
3 weeks 6 days ago
做漏洞扫描器的厂商，一般都具备安全基线检查的能力，见过很多DAST扫描工具都能做对应的检测。无非就是模版不同，具体根据不同的行业监管或等保要求而定。 在SDL中，想必绝大多数都会做DAST（主机漏洞扫描、web漏洞扫描、容器镜像漏洞扫描等），但是不一定会做安全基线配置核查。这主要是针对操作系统、数据库、中间件等PAAS层的服务，检查其历史漏洞、安全配置等情况，对于整个产品的安全性来说亦是根基。 此外在实战攻防中，已经遇到很多场景：比如通过打这些服务拿下产品。反之，做好安全基线则可以阻断攻击链，或有效提升攻击成功的难度。 -------------更多内容，请访问------------- 1、SDL 100问 SDL100问：我与SDL的故事 SAST误报太高，如何解决？ SDL需要哪些人参与？ 大家都有哪些SDL运营指标？ 业务系统是否可以带漏洞上线？ 日常的漏洞运营，也应该是SDL团队来做吗？ 关于开发安全BP，对开展SDL有哪些帮助？ SDL 83/100问：上传图片的API，除了常见web漏洞外，是否还会有风险？ 2、SDL创新实践 首发！“ 研发安全运营 ” 架构研究与实践 DevSecOps实施关键：研发安全团队 DevSecOps实施关键：研发安全流程 DevSecOps实施关键：研发安全规范 DevSecOps实施关键：研发安全工具 从安全视角，看研发安全 数字化转型下研发安全痛点 一个思考：安全测试驱动产品安全？ 3、SDL最初实践 【SDL最初实践】开篇 【SDL最初实践】安全培训 【SDL最初实践】安全需求 【SDL最初实践】安全设计 【SDL最初实践】安全开发 【SDL最初实践】安全测试 【SDL最初实践】安全审核 【SDL最初实践】安全响应 4、安全运营实践 基于实践的安全事件简述 安全事件运营SOP：钓鱼邮件 安全事件运营SOP：网络攻击 安全事件运营SOP：蜜罐告警 安全事件运营SOP：webshell事件 安全事件运营SOP：接收漏洞事件 应急能力提升：实战应急困境与突破 应急能力提升：挖矿权限维持攻击模拟

CVE-2007-0190 | edit-x ecommerce edit_address.php include_dir file inclusion (EDB-29438 / XFDB-31384)

Vuldb Updates
3 weeks 6 days ago
A vulnerability was found in edit-x ecommerce. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file edit_address.php. The manipulation of the argument include_dir leads to file inclusion. This vulnerability is known as CVE-2007-0190. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2007-2013 | JEx-Treme Einfacher Passworschutz index.php msg cross site scripting (EDB-29829 / XFDB-33542)

Vuldb Updates
3 weeks 6 days ago
A vulnerability was found in JEx-Treme Einfacher Passworschutz. It has been declared as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument msg leads to basic cross site scripting. The identification of this vulnerability is CVE-2007-2013. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2007-0759 | Umberto Caldera EasyMoblog 0.5.1 Libraries add_comment.php sql injection (EDB-29559 / BID-22369)

Vuldb Updates
3 weeks 6 days ago
A vulnerability has been found in Umberto Caldera EasyMoblog 0.5.1 and classified as critical. Affected is an unknown function of the file add_comment.php of the component Libraries. The manipulation leads to sql injection. This vulnerability is traded as CVE-2007-0759. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2007-1906 | Ecardmax.com Hot Editor 4.0 richedit/keyboard.php first path traversal (EDB-29827 / XFDB-33521)

Vuldb Updates
3 weeks 6 days ago
A vulnerability identified as problematic has been detected in Ecardmax.com Hot Editor 4.0. This vulnerability affects unknown code of the file richedit/keyboard.php. The manipulation of the argument first leads to path traversal. This vulnerability was named CVE-2007-1906. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad