Aggregator

CVE-2025-5585 | SiteOrigin Widgets Bundle Plugin up to 1.68.5 on WordPress data-url cross site scripting

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in SiteOrigin Widgets Bundle Plugin up to 1.68.5 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation of the argument data-url leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-5585. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

XOR Marks the Flaw in SAP GUI

darkreading
1 month 3 weeks ago
The company has patched two vulnerabilities in its Graphical User Interface that would have allowed attackers to grab data from a user's input history feature.
Jai Vijayan, Contributing Writer

Iranian Educated Manticore Targets Leading Tech Academics

Check Point Research
1 month 3 weeks ago

Key findings Introduction For the last few years, Check Point Research has been monitoring the activity of the Iranian APT group, Educated Manticore. This group aligns with activity tracked by the wider security community as APT42, Charming Kitten, or Mint Sandstorm, and is believed to operate on behalf of the Islamic Revolutionary Guard Corps’ Intelligence […]

The post Iranian Educated Manticore Targets Leading Tech Academics appeared first on Check Point Research.

[email protected]

CVE-2013-3147 | Microsoft Internet Explorer 6/7/8/9 code injection (ms13-jul / MS13-JUL)

Vuldb Updates
1 month 3 weeks ago
A vulnerability, which was classified as critical, was found in Microsoft Internet Explorer 6/7/8/9. Affected is an unknown function. The manipulation leads to code injection. This vulnerability is traded as CVE-2013-3147. The attack needs to be approached within the local network. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

INC

Dark Feed IO
1 month 3 weeks ago

You must login to view this content

cohenido

CVE-2017-14097 | Trend Micro Smart Protection Server up to 3.2 Database Encryption access control (EDB-43388 / ID 371051)

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in Trend Micro Smart Protection Server up to 3.2. It has been declared as critical. This vulnerability affects unknown code of the component Database Encryption. The manipulation leads to improper access controls. This vulnerability was named CVE-2017-14097. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

OpenRouter raises $40 million to simplify AI model overload

Help Net Security
1 month 3 weeks ago

OpenRouter, a startup helping software developers manage the growing number of AI models, has raised $40 million in venture capital. The company wants to make it easier for developers to choose and use the right AI model for their applications, without having to build their own complex systems. “There’s been a Cambrian explosion of models. Our business is a one-stop shop for all models,” CEO and co-founder Alex Atallah told The Wall Street Journal. OpenRouter … More →

The post OpenRouter raises $40 million to simplify AI model overload appeared first on Help Net Security.

Sinisa Markovic

JS利用

迪哥讲事
1 month 3 weeks ago
声明：文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由用户承担全部

NETSCOUT’s Arbor DDoS Protection Recognized as a Top Solution

Netscout
1 month 3 weeks ago
Omdia, a global analyst and advisory leader that helps connect the dots across the technology ecosystem, recently named NETSCOUT’s Arbor distributed denial-of-service (DDoS) protection solutions as leading in the DDoS prevention market. Omdia’s DDoS Prevention Technology Market Tracker 3Q24–4Q24 is an analysis of...
Gary Sockrider

CVE-2025-6627 | TOTOLINK A702R 4.0.0-B20230721.1521 HTTP POST Request /boafrm/formIpv6Setup submit-url buffer overflow (EUVD-2025-19135)

VulDB Recent Entries
1 month 3 weeks ago
A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formIpv6Setup of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. This vulnerability was named CVE-2025-6627. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad