Aggregator

Yurei

Dark Feed IO
3 months 1 week ago

You must login to view this content

cohenido

LunaLock Ransomware threatens victims by feeding stolen data to AI models

Security Affairs
3 months 1 week ago
LunaLock, a new ransomware gang, introduced a unique cyber extortion technique, threatening to turn stolen art into AI training data. A new ransomware group, named LunaLock, appeared in the threat landscape with a unique cyber extortion technique, threatening to turn stolen art into AI training data. Recently, the LunaLock group targeted the website Artists&Clients and […]
Pierluigi Paganini

Hackers Hijack 18 Popular npm Packages Downloaded Over 2 Billion Times Weekly

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 1 week ago

Hackers have hijacked 18 extremely popular npm packages, downloaded more than 2 billion times every week, injecting them with sophisticated malware that targets cryptocurrency users and developers. Early on September 8th, a security feed flagged the sudden update of 18 npm packages—including favorites like chalk, debug, chalk-template, and supports-color—with malicious code, as per a report by Aikio. These packages […]

The post Hackers Hijack 18 Popular npm Packages Downloaded Over 2 Billion Times Weekly appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

CVE-2025-10109 | Campcodes Online Loan Management System 1.0 ajax.php?action=delete_payment ID sql injection (EUVD-2025-27187)

Vuldb Updates
3 months 1 week ago
A vulnerability labeled as critical has been found in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=delete_payment. Executing manipulation of the argument ID can lead to sql injection. The identification of this vulnerability is CVE-2025-10109. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-10111 | itsourcecode Student Information Management System 1.0 index.php ID sql injection (EUVD-2025-27179)

Vuldb Updates
3 months 1 week ago
A vulnerability described as critical has been identified in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/instructor/index.php. The manipulation of the argument ID results in sql injection. This vulnerability is identified as CVE-2025-10111. The attack can be executed remotely. Additionally, an exploit exists.
vuldb.com

CVE-2025-10112 | itsourcecode Student Information Management System 1.0 index.php ID sql injection (EUVD-2025-27192)

Vuldb Updates
3 months 1 week ago
A vulnerability classified as critical has been found in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. This vulnerability is tracked as CVE-2025-10112. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com

CVE-2025-10113 | itsourcecode Student Information Management System 1.0 index.php ID sql injection (EUVD-2025-27188)

Vuldb Updates
3 months 1 week ago
A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. This affects an unknown function of the file /admin/modules/room/index.php. Such manipulation of the argument ID leads to sql injection. This vulnerability is listed as CVE-2025-10113. The attack may be performed from remote. In addition, an exploit is available.
vuldb.com

CVE-2025-10117 | SourceCodester Simple To-Do List System 1.0 Add New Task /fetch_tasks.php cross site scripting

Vuldb Updates
3 months 1 week ago
A vulnerability categorized as problematic has been discovered in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetch_tasks.php of the component Add New Task. Executing manipulation with the input <script>alert('XSS')</script> can lead to cross site scripting. This vulnerability is handled as CVE-2025-10117. The attack can be executed remotely. Additionally, an exploit exists.
vuldb.com

CVE-2025-10118 | itsourcecode E-Logbook with Health Monitoring System for COVID-19 /login.php sql injection (EUVD-2025-27217)

Vuldb Updates
3 months 1 week ago
A vulnerability identified as critical has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. This vulnerability is uniquely identified as CVE-2025-10118. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com

CVE-2025-10120 | Tenda AC20 up to 16.03.08.12 GetParentControlInfo strcpy mac buffer overflow (EUVD-2025-27216)

Vuldb Updates
3 months 1 week ago
A vulnerability labeled as critical has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. This vulnerability was named CVE-2025-10120. The attack may be performed from remote. In addition, an exploit is available.
vuldb.com

Maduro Hails Huawei Mate X6 Gift From China as ‘Unhackable’ by U.S.

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 1 week ago

Venezuelan President Nicolás Maduro made bold claims about cybersecurity during a press conference on September 1, 2025, as he showcased a Huawei smartphone gifted to him by Chinese President Xi Jinping. Holding up the device before international media in Caracas, Maduro declared it “the best phone in the world” and asserted that “the Americans can’t […]

The post Maduro Hails Huawei Mate X6 Gift From China as ‘Unhackable’ by U.S. appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

Attackers test the limits of railway cybersecurity

Help Net Security
3 months 1 week ago

Railway systems are the lifeblood of many economies, supporting everything from daily passenger transport to military and industrial operations, so the question arises: how secure are they from a cybersecurity perspective? Like all industries, the railway industry is undergoing its digital transformation. New technologies have improved safety and operational control over trains and tracks, but they have also introduced risks of sabotage that could lead to serious incidents, including collisions. A low-cost hack could bring … More →

The post Attackers test the limits of railway cybersecurity appeared first on Help Net Security.

Sinisa Markovic

Managed ad