Aggregator

CVE-2025-9109 | Portabilis i-Diario up to 1.5.0 Password Recovery Endpoint /password/email observable response discrepancy

Vuldb Updates
3 days 17 hours ago
A vulnerability described as problematic has been identified in Portabilis i-Diario up to 1.5.0. Affected by this vulnerability is an unknown functionality of the file /password/email of the component Password Recovery Endpoint. The manipulation results in observable response discrepancy. This vulnerability is known as CVE-2025-9109. It is possible to launch the attack remotely. Furthermore, an exploit is available.
vuldb.com

CVE-2025-9100 | zhenfeng13 My-Blog 1.0.0 Frontend Blog Article Comment /blog/comment authentication replay (Issue 149 / EUVD-2025-25111)

Vuldb Updates
3 days 17 hours ago
A vulnerability has been found in zhenfeng13 My-Blog 1.0.0 and classified as problematic. This affects an unknown part of the file /blog/comment of the component Frontend Blog Article Comment Handler. Performing manipulation results in authentication bypass by capture-replay. This vulnerability is identified as CVE-2025-9100. The attack can be initiated remotely. Additionally, an exploit exists.
vuldb.com

CVE-2025-9101 | zhenfeng13 My-Blog up to 1.0.0 Tag /admin/tags/save cross site scripting (Issue 147)

Vuldb Updates
3 days 17 hours ago
A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/tags/save of the component Tag Handler. Executing manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2025-9101. The attack can be launched remotely. Moreover, an exploit is present.
vuldb.com

CVE-2025-9102 | 1&1 Mail & Media mail.com App 8.8.0 on Android com.mail.mobile.android.mail AndroidManifest.xml improper export of android application components (EUVD-2025-25112)

Vuldb Updates
3 days 17 hours ago
A vulnerability was found in 1&1 Mail & Media mail.com App 8.8.0 on Android. It has been classified as problematic. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.mail.mobile.android.mail. The manipulation leads to improper export of android application components. This vulnerability is listed as CVE-2025-9102. The attack must be carried out locally. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-9103 | ZenCart 2.1.0 CKEditor cross site scripting

Vuldb Updates
3 days 17 hours ago
A vulnerability was found in ZenCart 2.1.0. It has been declared as problematic. Impacted is an unknown function of the component CKEditor. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2025-9103. The attack may be launched remotely. Furthermore, there is an exploit available. The real existence of this vulnerability is still doubted at the moment. The vendor declares this as "intended behavior, allowed for authorized administrators".
vuldb.com

CVE-2025-9104 | Portabilis i-Diario up to 1.5.0 Informações Adicionais Page /planos-de-aulas-por-disciplina Parecer/Objeto de Conhecimento/Habilidades cross site scripting (EUVD-2025-25113)

Vuldb Updates
3 days 17 hours ago
A vulnerability was found in Portabilis i-Diario up to 1.5.0. It has been rated as problematic. The affected element is an unknown function of the file /planos-de-aulas-por-disciplina/ of the component Informações Adicionais Page. This manipulation of the argument Parecer/Objeto de Conhecimento/Habilidades causes cross site scripting. This vulnerability is registered as CVE-2025-9104. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-9105 | Portabilis i-Diario up to 1.5.0 Informações Adicionais Page /planos-de-ensino-por-areas-de-conhecimento Parecer/Conteúdos/Objetivos cross site scripting (EUVD-2025-25116)

Vuldb Updates
3 days 17 hours ago
A vulnerability categorized as problematic has been discovered in Portabilis i-Diario up to 1.5.0. The impacted element is an unknown function of the file /planos-de-ensino-por-areas-de-conhecimento/ of the component Informações Adicionais Page. Such manipulation of the argument Parecer/Conteúdos/Objetivos leads to cross site scripting. This vulnerability is documented as CVE-2025-9105. The attack can be executed remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-9106 | Portabilis i-Diario up to 1.5.0 Informações Adicionais Page /planos-de-ensino-por-disciplina Parecer/Conteúdos/Objetivos cross site scripting (EUVD-2025-25114)

Vuldb Updates
3 days 17 hours ago
A vulnerability identified as problematic has been detected in Portabilis i-Diario up to 1.5.0. This affects an unknown function of the file /planos-de-ensino-por-disciplina/ of the component Informações Adicionais Page. Performing manipulation of the argument Parecer/Conteúdos/Objetivos results in cross site scripting. This vulnerability is reported as CVE-2025-9106. The attack is possible to be carried out remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-9107 | Portabilis i-Diario up to 1.5.0 search_autocomplete q cross site scripting (EUVD-2025-25115)

Vuldb Updates
3 days 17 hours ago
A vulnerability labeled as problematic has been found in Portabilis i-Diario up to 1.5.0. This impacts an unknown function of the file /alunos/search_autocomplete. Executing manipulation of the argument q can lead to cross site scripting. This vulnerability appears as CVE-2025-9107. The attack may be performed from a remote location. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-43201 | Apple Music Classical up to 2.2 on Android information disclosure (EUVD-2025-25051)

Vuldb Updates
3 days 17 hours ago
A vulnerability marked as problematic has been reported in Apple Music Classical up to 2.2 on Android. This vulnerability affects unknown code. The manipulation leads to information disclosure. This vulnerability is referenced as CVE-2025-43201. The attack can only be performed from a local environment. No exploit is available. It is suggested to upgrade the affected component.
vuldb.com

Beast

Dark Feed IO
3 days 17 hours ago

You must login to view this content

cohenido

Beast

Dark Feed IO
3 days 17 hours ago

You must login to view this content

cohenido

APT SideWinder Actor Profile – Recent Attacks, Tactics, Techniques, and Procedures

Cyber Security News
3 days 17 hours ago

APT SideWinder, also known as Rattlesnake, Razor Tiger, and T-APT-04, is a nation-state advanced persistent threat (APT) group active since at least 2012 and believed to originate from India. Noted for targeting military, government, and strategic business entities, particularly in South Asia, SideWinder’s operational footprint has recently expanded to critical infrastructure in the Middle East […]

The post APT SideWinder Actor Profile – Recent Attacks, Tactics, Techniques, and Procedures appeared first on Cyber Security News.

Guru Baran

Bragg Confirms Cyberattack, Internal IT Systems Breached

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 days 17 hours ago

Bragg Gaming Group (NASDAQ: BRAG, TSX: BRAG), a prominent content and technology provider in the online gaming industry, has disclosed a cybersecurity incident that compromised its internal computer systems over the weekend. The company discovered the breach on August 16, 2025, and has immediately implemented containment measures while engaging independent cybersecurity experts to assist with […]

The post Bragg Confirms Cyberattack, Internal IT Systems Breached appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

The Leap from NSA to SA: What’s Slowing Down 5G’s Next Evolution?

Netscout
3 days 17 hours ago
Significant strides have been made since the commercial launch and rollout of 5G in 2019. As of 2025, more than 300 service providers in 100 plus countries in the global telecom industry are now offering 5G commercial services. But the vast majority of these networks are based on non-standalone (NSA) architecture that...
Agnes Mends-Crentsil

Noodlophile infostealer is hiding behind fake copyright and PI infringement notices

Help Net Security
3 days 17 hours ago

Attackers pushing the Noodlophile infostealer are targeting businesses with spear-phishing emails threatening legal action due to copyright or intellectual property infringement, Morphisec researchers have warned. The campaign The emails, ostensibly sent by a law firm, are tailored to the recipients: they mention details like specific Facebook Page IDs and company ownership information, and are being sent to key employees or generic inboxes (e.g., info@, support@) of various businesses and enterprises across US, Europe, Baltic countries … More →

The post Noodlophile infostealer is hiding behind fake copyright and PI infringement notices appeared first on Help Net Security.

Zeljka Zorz

Managed ad