Aggregator

CVE-2025-6102 | Wifi-soft UniBox Controller up to 20250506 logout.php mac_address os command injection (EUVD-2025-18358)

VulDB Recent Entries
8 months 1 week ago
A vulnerability classified as critical was found in Wifi-soft UniBox Controller up to 20250506. Affected by this vulnerability is an unknown functionality of the file /authentication/logout.php. The manipulation of the argument mac_address leads to os command injection. This vulnerability is known as CVE-2025-6102. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-6101 | letta-ai letta up to 0.4.1 letta/letta/interface.py function_message function_name/function_args eval injection (Issue 2613 / EUVD-2025-18359)

VulDB Recent Entries
8 months 1 week ago
A vulnerability classified as critical has been found in letta-ai letta up to 0.4.1. Affected is the function function_message of the file letta/letta/interface.py. The manipulation of the argument function_name/function_args leads to improper neutralization of directives in dynamically evaluated code. This vulnerability is traded as CVE-2025-6101. Access to the local network is required for this attack to succeed. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-6100 | realguoshuai open-video-cms 1.0 /v1/video/list sort sql injection (EUVD-2025-18355)

VulDB Recent Entries
8 months 1 week ago
A vulnerability was found in realguoshuai open-video-cms 1.0. It has been rated as critical. This issue affects some unknown processing of the file /v1/video/list. The manipulation of the argument sort leads to sql injection. The identification of this vulnerability is CVE-2025-6100. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Security Affairs newsletter Round 528 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs
8 months 1 week ago
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Palo Alto Networks fixed multiple privilege escalation flaws Unusual toolset used in recent Fog Ransomware attack […]
Pierluigi Paganini

EU AI ACT

Security Boulevard
8 months 1 week ago

What is the EU AI Act? The EU AI Act (European Union Artificial Intelligence Act) is the world’s first comprehensive legal framework regulating artificial intelligence. Introduced by the European Commission in April 2021 and formally adopted in 2024, the Act is designed to ensure AI systems developed or used in the EU are safe, transparent, […]

The post EU AI ACT appeared first on Centraleyes.

The post EU AI ACT appeared first on Security Boulevard.

Deborah Erlanger

CVE-2024-57727

CVE Trends
8 months 1 week ago
Currently trending CVE - Hype Score: 4 - SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration ...

CVE-2025-32711

CVE Trends
8 months 1 week ago
Currently trending CVE - Hype Score: 3 - Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Managed ad