Aggregator

Hackers Exploiting Adobe Magento RCE Vulnerability Exploited in the Wild – 3 in 5 Stores Vulnerable

Cyber Security News
3 months 3 weeks ago

Hackers have begun actively targeting a critical remote code execution flaw in Adobe’s Magento e-commerce platform, putting thousands of online stores at immediate risk just six weeks after Adobe issued an emergency patch. Known as SessionReaper and tracked as CVE-2025-54236, the vulnerability allows unauthenticated attackers to hijack customer sessions and potentially execute arbitrary code, leading […]

The post Hackers Exploiting Adobe Magento RCE Vulnerability Exploited in the Wild – 3 in 5 Stores Vulnerable appeared first on Cyber Security News.

Guru Baran

CVE-2025-7730 | Bold Page Builder Plugin up to 5.4.5 on WordPress percentage cross site scripting

VulDB Recent Entries
3 months 3 weeks ago
A vulnerability has been found in Bold Page Builder Plugin up to 5.4.5 on WordPress and classified as problematic. This affects an unknown part. Performing manipulation of the argument percentage results in cross site scripting. This vulnerability is identified as CVE-2025-7730. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2025-40643 | Status Tracker Energy CRM 2025 Query create_job_submit.php JobCreatedBy cross site scripting

VulDB Recent Entries
3 months 3 weeks ago
A vulnerability marked as problematic has been reported in Status Tracker Energy CRM 2025. The impacted element is an unknown function of the file /crm/create_job_submit.php of the component Query Handler. Performing manipulation of the argument JobCreatedBy results in cross site scripting. This vulnerability is known as CVE-2025-40643. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

CVE-2025-41073 | TESI Gandia Integra Total 4.4.2236.1 ZIP File comprimir.php path traversal

VulDB Recent Entries
3 months 3 weeks ago
A vulnerability labeled as critical has been found in TESI Gandia Integra Total 4.4.2236.1. The affected element is an unknown function of the file /encuestas/integraweb[_v4]/integra/html/view/comprimir.php of the component ZIP File Handler. Such manipulation leads to path traversal. This vulnerability is traded as CVE-2025-41073. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.
vuldb.com

Cybercriminals Impersonate Aid Agencies to Lure Victims with Fake Financial Offers

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 3 weeks ago

Scammers have intensified their efforts to defraud vulnerable populations through sophisticated impersonation schemes and fraudulent financial aid offers, according to recent intelligence monitoring and law enforcement findings. The threat landscape reveals a coordinated, international ecosystem of fraud operations targeting individuals across multiple social media platforms, with particular focus on older adults who represent a significant […]

The post Cybercriminals Impersonate Aid Agencies to Lure Victims with Fake Financial Offers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

Stealthy Malware Leveraging Variable Functions and Cookies for Evasion

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months 3 weeks ago

Cybersecurity researchers at Wordfence Threat Intelligence and their Care and Response teams have observed a persistent trend in new malware that leverages heavy obfuscation techniques to evade detection. While some malware attempts to blend in as legitimate files, the more common strategy involves sophisticated obfuscation through variable functions and cookie manipulation. This article explores this […]

The post Stealthy Malware Leveraging Variable Functions and Cookies for Evasion appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

Managed ad