Aggregator

文章描述了错误代码521的情况及其影响,指出该错误通常与Cloudflare相关,表示服务器无法联系到原服务器,可能导致网站无法正常访问,需检查配置或联系服务提供商解决问题。

A vulnerability was found in Quiz and Survey Master Plugin up to 10.2.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Setting Handler. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2025-6790. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in WP Shopify Plugin up to 1.5.3 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-7808. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Injection Guard Plugin up to 1.2.7 on WordPress. This affects an unknown part. The manipulation of the argument $_SERVER['REQUEST_URI'] leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-8046. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in PPWP Plugin up to 1.9.10 on WordPress. Affected by this vulnerability is an unknown functionality of the component REST API. The manipulation leads to improper handling of insufficient permissions or privileges. This vulnerability is known as CVE-2025-5998. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apache bRPC up to 1.14.0. It has been declared as problematic. This vulnerability affects unknown code of the component Redis Parser. The manipulation leads to denial of service. This vulnerability was named CVE-2025-54472. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Campcodes Online Recruitment Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Recruitment/index.php?page=view_vacancy. The manipulation of the argument ID leads to sql injection. The identification of this vulnerability is CVE-2025-8950. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in PHPGurukul Teachers Record Management System 2.1. It has been classified as critical. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. This vulnerability is traded as CVE-2025-8951. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Campcodes Online Flight Booking Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login of the component Login. The manipulation of the argument Username leads to sql injection. This vulnerability is known as CVE-2025-8952. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /check_availability.php. The manipulation of the argument employeeid leads to sql injection. This vulnerability is handled as CVE-2025-8953. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in PHPGurukul Hospital Management System 4.0. This affects an unknown part of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. This vulnerability is uniquely identified as CVE-2025-8954. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in code-projects Medical Store Management System 1.0. Affected is an unknown function of the file ChangePassword.java. The manipulation of the argument newPassTxt leads to sql injection. This vulnerability is traded as CVE-2025-8931. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in projectworlds Online Notes Sharing Platform 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument User leads to sql injection. This vulnerability was named CVE-2025-8946. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in projectworlds Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /query_data.php. The manipulation of the argument dateF/dateP leads to sql injection. The identification of this vulnerability is CVE-2025-8947. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /front.php. The manipulation of the argument rid leads to sql injection. This vulnerability is traded as CVE-2025-8948. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Cybercriminals are increasingly leveraging personalization tactics to enhance the effectiveness of their malware-delivery phishing campaigns, with threat actors customizing subject lines, attachment names, and embedded links to create a false sense of authenticity and urgency. This sophisticated approach represents a significant evolution in social engineering techniques, as attackers craft emails that appear legitimate by incorporating […]

The post Threat Actors Personalize Phishing Attacks With Advanced Tactics for Malware Delivery appeared first on Cyber Security News.

火狐浏览器的每夜构建版在Windows 10 v1709及更早版本中无法运行，原因是软件BUG而非故意为之。受影响用户启动时会提示缺少api-ms-win-core-console-11-2-0.dll文件。尽管这是测试版常见问题，火狐短期内仍将继续支持这些旧版系统。

A vulnerability classified as critical was found in Linux Kernel up to 5.4.224/5.10.155/5.15.79/6.0.9. This vulnerability affects the function __unregister_kprobe_top. The manipulation leads to use after free. This vulnerability was named CVE-2022-49779. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.4.224/5.10.154/5.15.78/6.0.8. This affects the function bnxt_hwrm_set_coal. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2022-49869. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.10.153/5.15.77/6.0.7 and classified as critical. Affected by this vulnerability is the function piix4_remove of the component i2c. The manipulation of the argument piix4_adapter_count leads to memory corruption. This vulnerability is known as CVE-2022-49900. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.