Aggregator

FBI Warns of Hackers Altering Photos Found on Social Media to Use as Fake Proof

Cyber Security News
1 month 1 week ago

A new alert warns people about a growing scam that uses altered photos to trick families into paying fake ransom demands. In a notice titled Alert Number: I-120525-PSA, dated December 5, 2025. The FBI explains that criminals are taking photos from social media and other public sites and altering them. Then, they are used as […]

The post FBI Warns of Hackers Altering Photos Found on Social Media to Use as Fake Proof appeared first on Cyber Security News.

Abinaya

CVE-2025-60912 | phpIPAM 1.7.3 HTTP generate-mysql.php cross-site request forgery (EUVD-2025-201713)

VulDB Recent Entries
1 month 1 week ago
A vulnerability classified as problematic was found in phpIPAM 1.7.3. Affected by this vulnerability is an unknown functionality of the file generate-mysql.php of the component HTTP Handler. Such manipulation leads to cross-site request forgery. This vulnerability is documented as CVE-2025-60912. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-64115 | leepeuker movary up to 0.68.x Settings Endpoint HTTP Referer redirect

Vuldb Updates
1 month 1 week ago
A vulnerability, which was classified as problematic, was found in leepeuker movary up to 0.68.x. The impacted element is an unknown function of the component Settings Endpoint. The manipulation of the argument HTTP Referer results in open redirect. This vulnerability is reported as CVE-2025-64115. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.
vuldb.com

CVE-2025-64182 | AcademySoftwareFoundation OpenEXR up to 3.2.4/3.3.5/3.4.2 EXR File Parser buffer overflow (GHSA-vh63-9mqx-wmjr / Nessus ID 274728)

Vuldb Updates
1 month 1 week ago
A vulnerability categorized as critical has been discovered in AcademySoftwareFoundation OpenEXR up to 3.2.4/3.3.5/3.4.2. This impacts an unknown function of the component EXR File Parser. Executing manipulation can lead to buffer overflow. This vulnerability is registered as CVE-2025-64182. The attack needs to be launched locally. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-64656 | Microsoft Azure App Gateway out-of-bounds (CNNVD-202511-2378)

Vuldb Updates
1 month 1 week ago
A vulnerability described as critical has been identified in Microsoft Azure App Gateway. Affected is an unknown function. The manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2025-64656. The attack can be executed remotely. There is not any exploit available. This product is a managed service. This means that users cannot maintain vulnerability countermeasures themselves.
vuldb.com

CVE-2025-64762 | workos authkit-nextjs up to 2.11.0 cache containing sensitive information

Vuldb Updates
1 month 1 week ago
A vulnerability classified as critical was found in workos authkit-nextjs up to 2.11.0. Affected by this vulnerability is an unknown functionality. The manipulation results in use of cache containing sensitive information. This vulnerability is reported as CVE-2025-64762. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.
vuldb.com

Managed ad