Aggregator

Submit #567169 / VDB-308222

Submit #567166 / VDB-308221

Submit #567156 / VDB-308220

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/customer_update.php. The manipulation of the argument ID leads to sql injection. The identification of this vulnerability is CVE-2025-4503. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/creditor_add.php. The manipulation leads to sql injection. This vulnerability was named CVE-2025-4502. The attack can be initiated remotely. Furthermore, there is an exploit available.

Cybersecurity experts have identified an escalating campaign by the notorious hacker collective Scattered Spider, which continues to evolve its sophisticated attack methods in 2025. The group, active since at least 2022, has shifted focus to target business services including Klaviyo, HubSpot, and Pure Storage, posing significant threats to organizations relying on these platforms. Using advanced […]

The post Scattered Spider Malware Targeting Klaviyo, HubSpot, and Pure Storage Services appeared first on Cyber Security News.

A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects the function searchalbum of the component Search Albums. The manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2025-4501. Local access is required to approach this attack. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. This vulnerability is handled as CVE-2025-4500. An attack has to be approached locally. Furthermore, there is an exploit available.

Submit #567145 / VDB-308219

Submit #567144 / VDB-308218

A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Affected by this vulnerability is the function Add of the component Add Information. The manipulation of the argument x[i].name/x[i].disease leads to stack-based buffer overflow. This vulnerability is known as CVE-2025-4499. The attack needs to be approached locally. Furthermore, there is an exploit available.

Submit #567140 / VDB-307323

A recent discovery by the FortiMail Incident Response team has revealed a highly sophisticated email campaign targeting organizations in Spain, Italy, and Portugal. This attack distributes a potent Remote Access Trojan (RAT) known as RATty, primarily affecting Windows systems, but also posing a threat to Linux and macOS environments where the Java Runtime Environment (JRE) […]

The post Hackers Exploit PDF Invoices to Target Windows, Linux, and macOS Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #567135 / VDB-307407

A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Affected is the function a::install of the component Install Bus. The manipulation of the argument bus leads to stack-based buffer overflow. This vulnerability is traded as CVE-2025-4498. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.

Submit #567111 / VDB-308217

Submit #567110 / VDB-308216

Submit #567109 / VDB-308215

Submit #567108 / VDB-308214