Aggregator

CVE-2025-7628 | YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd /deleteFile fileName path traversal (Issue 15 / EUVD-2025-21381)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. It has been classified as critical. This affects the function deleteFile of the file /deleteFile. The manipulation of the argument fileName leads to path traversal. This vulnerability is uniquely identified as CVE-2025-7628. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
vuldb.com

CVE-2025-7627 | YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd /fileUpload File unrestricted upload (Issue 14 / EUVD-2025-21382)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classified as critical. Affected by this issue is the function fileUpload of the file /fileUpload. The manipulation of the argument File leads to unrestricted upload. This vulnerability is handled as CVE-2025-7627. The attack may be launched remotely. Furthermore, there is an exploit available. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
vuldb.com

CVE-2025-7626 | YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd /onlinePreview url path traversal (Issue 13 / EUVD-2025-21363)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability has been found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classified as critical. Affected by this vulnerability is the function onlinePreview of the file /onlinePreview. The manipulation of the argument url leads to path traversal. This vulnerability is known as CVE-2025-7626. The attack can be launched remotely. Furthermore, there is an exploit available. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
vuldb.com

CVE-2025-7625 | YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd /download url path traversal (Issue 12 / EUVD-2025-21360)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability, which was classified as critical, was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. Affected is the function Download of the file /download. The manipulation of the argument url leads to path traversal. This vulnerability is traded as CVE-2025-7625. It is possible to launch the attack remotely. Furthermore, there is an exploit available. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
vuldb.com

发行版 GParted Live 1.7.0 停止支持 32 位架构

Solidot
1 month 2 weeks ago
旨在帮助用户管理磁盘分区的发行版 GParted Live 释出了 v1.7.0。新版本的一大变化是停止支持 32 位架构，原因是 GParted Live 是基于 Debian Sid，而 Debian 已从 Sid 软件包库中移除了 i386 kernel 包，因此它只提供 64 位 amd64 版本。GParted Live 1.7.0 的其他变化包括：GParted 1.7.0，基于 Debian Sid (截至 2025/Jul/12），Linux 内核版本更新到 6.12.37-1，实现了避免启动时块设备随机排序的机制——此举旨在防止用户在多个驱动器的系统中选择错误的磁盘。

11 Best Cloud Access Security Broker Software (CASB) – 2025

Cyber Security News
1 month 2 weeks ago

As organizations accelerate digital transformation, the need for robust cloud security has never been greater. Cloud Access Security Broker (CASB) software stands at the forefront, acting as the critical gatekeeper between users and cloud service providers. With the explosion of SaaS, IaaS, and PaaS platforms, businesses face evolving threats, compliance challenges, and the risk of […]

The post 11 Best Cloud Access Security Broker Software (CASB) – 2025 appeared first on Cyber Security News.

Cyber Writes Team

Top 10 Cyber Attack Maps to See Digital Threats In 2025

Cyber Security News
1 month 2 weeks ago

In 2025, the digital threat landscape is more dynamic and complex than ever. Cyber attacks are escalating in frequency, sophistication, and impact, targeting businesses, governments, and individuals worldwide. Real-time visibility into these threats is essential for proactive defense, strategic planning, and rapid incident response. Cyber attack maps have become indispensable tools for cybersecurity professionals and […]

The post Top 10 Cyber Attack Maps to See Digital Threats In 2025 appeared first on Cyber Security News.

Cyber Writes Team

CVE-2025-41393 | Ricoh Company Laser Printer/MFP Ricoh Web Image Monitor cross site scripting (ricoh-2025-000001 / EUVD-2025-14317)

Vuldb Updates
1 month 2 weeks ago
A vulnerability has been found in Ricoh Company Laser Printer and MFP and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Ricoh Web Image Monitor. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-41393. The attack can be launched remotely. There is no exploit available.
vuldb.com

Managed ad