Submit #574600: TOTOLINK A3002RU V2 /A3002R_V2 /A3002R_V4 /A3002RU_V3/ A702R V3.0.0-B20230809.1615 Buffer Overflow [Accepted]
Submit #574600 / VDB-309296
Aggregator
Submit #574599: TOTOLINK A3002RU V2 /A3002R_V2 /A3002R_V4 /A3002RU_V3/ A702R V3.0.0-B20230809.1615 Buffer Overflow [Accepted]
7 months ago
Submit #574599 / VDB-309295
BabyShark
История с пометкой 18+? Останина хочет заблокировать «Википедию» из-за "опасных" фактов
7 months ago
Если дети читают про историю без маркировки — в Думе теряет покой.
New Vulnerability Affects All Intel Processors From The Last 6 Years
7 months ago
A newly discovered class of vulnerabilities in Intel processors, termed Branch Predictor Race Conditions (BPRC), allows attackers to systematically extract sensitive data from the cache and random-access memory (RAM) of other users sharing the same hardware. Affecting all Intel processors released in the past six years-including those in consumer devices and cloud server infrastructure-the vulnerability […]
The post New Vulnerability Affects All Intel Processors From The Last 6 Years appeared first on Cyber Security News.
Guru Baran
Chinese Agent Impersonates as Stanford Student For Intelligence Gathering
7 months ago
A recent investigation has uncovered a concerning case of espionage at one of America’s premier academic institutions, where a Chinese intelligence agent posed as a Stanford University student to gather sensitive research information. The agent, operating under the alias “Charles Chen,” systematically targeted students conducting China-related research in what experts describe as part of a […]
The post Chinese Agent Impersonates as Stanford Student For Intelligence Gathering appeared first on Cyber Security News.
Guru Baran
Qilin
7 months ago
You must login to view this content
cohenido
CVE-2022-32149 | Google Go Header ParseAcceptLanguage Accept-Language denial of service (EUVD-2022-7037)
7 months ago
A vulnerability was found in Google Go and classified as problematic. This issue affects the function ParseAcceptLanguage of the component Header Handler. The manipulation of the argument Accept-Language leads to denial of service.
The identification of this vulnerability is CVE-2022-32149. The attack may be initiated remotely. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2025-4735 | Campcodes Sales and Inventory System 1.0 /pages/product.php Picture unrestricted upload (EUVD-2025-15396)
7 months ago
A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/product.php. The manipulation of the argument Picture leads to unrestricted upload.
This vulnerability is known as CVE-2025-4735. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-4740 | BeamCtrl Airiana up to 11.0 coef deserialization (Issue 42 / EUVD-2025-15395)
7 months ago
A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affects unknown code of the file coef. The manipulation leads to deserialization.
This vulnerability was named CVE-2025-4740. The attack needs to be approached locally. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-47809 | Wibu CodeMeter up to 8.30. Control Center least privilege violation (EUVD-2025-15399)
7 months ago
A vulnerability, which was classified as critical, has been found in Wibu CodeMeter up to 8.30.. This issue affects some unknown processing of the component Control Center. The manipulation leads to least privilege violation.
The identification of this vulnerability is CVE-2025-47809. It is possible to launch the attack on the local host. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-4743 | code-projects Employee Record System 1.0 /dashboard/getData.php keywords sql injection (EUVD-2025-15402)
7 months ago
A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /dashboard/getData.php. The manipulation of the argument keywords leads to sql injection.
This vulnerability is known as CVE-2025-4743. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2023-31358 | AMD AIM-T Manageability API prior 6.0.0.2234 uncontrolled search path (EUVD-2023-35669)
7 months ago
A vulnerability classified as critical was found in AMD AIM-T Manageability API. This vulnerability affects unknown code. The manipulation leads to uncontrolled search path.
This vulnerability was named CVE-2023-31358. An attack has to be approached locally. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-4771 | PHPGurukul Online Course Registration 3.1 /admin/course.php coursecode sql injection (EUVD-2025-15432)
7 months ago
A vulnerability, which was classified as critical, was found in PHPGurukul Online Course Registration 3.1. Affected is an unknown function of the file /admin/course.php. The manipulation of the argument coursecode leads to sql injection.
This vulnerability is traded as CVE-2025-4771. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-4772 | PHPGurukul Online Course Registration 3.1 /admin/department.php department sql injection (EUVD-2025-15431)
7 months ago
A vulnerability has been found in PHPGurukul Online Course Registration 3.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/department.php. The manipulation of the argument department leads to sql injection.
This vulnerability is known as CVE-2025-4772. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-2305 | Syncpilot Live Contract up to 5.4.11/5.5.3/5.6.2 path traversal (EUVD-2025-15430)
7 months ago
A vulnerability classified as critical was found in Syncpilot Live Contract up to 5.4.11/5.5.3/5.6.2. Affected by this vulnerability is an unknown functionality. The manipulation leads to path traversal.
This vulnerability is known as CVE-2025-2305. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-2306 | Syncpilot Live Contract up to 5.4.11/5.5.3/5.6.2 access control (EUVD-2025-15429)
7 months ago
A vulnerability has been found in Syncpilot Live Contract up to 5.4.11/5.5.3/5.6.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls.
This vulnerability was named CVE-2025-2306. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
NHS England Rolls Out Voluntary Cyber Charter for IT Suppliers
7 months ago
Urges Companies to Regularly Patch Their Products
In a bid to prevent disruptive hacks, the English National Health Service is prodding suppliers to commit to voluntary cybersecurity measures, which include regularly patching IT systems, instituting MFA, and monitoring systems to allow prompt incident response.
In a bid to prevent disruptive hacks, the English National Health Service is prodding suppliers to commit to voluntary cybersecurity measures, which include regularly patching IT systems, instituting MFA, and monitoring systems to allow prompt incident response.
How to Develop and Communicate Metrics for CSIRPs
7 months ago
A well-documented cybersecurity incident response program (CSIRP) provides the transparency needed for informed decision-making, protecting the organization in a constantly changing threat environment.
Craig Porter
Ransomware gangs increasingly use Skitnet post-exploitation malware
7 months ago
Ransomware gang members increasingly use a new malware called Skitnet ("Bossnet") to perform stealthy post-exploitation activities on breached networks. [...]
Bill Toulas
CVE-2019-9075 | GNU binutils 2.32 libbfd archive64.c _bfd_archive_64_bit_slurp_armap memory corruption (K42059040 / Nessus ID 236727)
7 months ago
A vulnerability, which was classified as critical, was found in GNU binutils 2.32. This affects the function _bfd_archive_64_bit_slurp_armap of the file archive64.c of the component libbfd. The manipulation leads to memory corruption.
This vulnerability is uniquely identified as CVE-2019-9075. An attack has to be approached locally. There is no exploit available.
vuldb.com