Aggregator

CVE-2021-27877

CVE Trends
1 month 2 weeks ago
Currently trending CVE - Hype Score: 15 - An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely ...

Chaos

Dark Feed IO
1 month 2 weeks ago

You must login to view this content

cohenido

Qilin

Dark Feed IO
1 month 2 weeks ago

You must login to view this content

cohenido

U.S. CISA adds Android Framework flaws to its Known Exploited Vulnerabilities catalog

Security Affairs
1 month 2 weeks ago
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Android Framework flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Android Framework flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: This week, Google’s new Android update patched 107 vulnerabilities, including two already […]
Pierluigi Paganini

Hackers can Hijack Your Dash Cams in Seconds and Weaponize it for Future Attacks

Cyber Security News
1 month 2 weeks ago

Dashcams have become essential devices for drivers worldwide, serving as reliable witnesses in case of accidents or roadside disputes. However, a team of Singaporean cybersecurity researchers has uncovered a disturbing reality: these seemingly harmless devices can be hijacked within seconds and turned into powerful surveillance tools. The findings, presented at the Security Analyst Summit 2025, […]

The post Hackers can Hijack Your Dash Cams in Seconds and Weaponize it for Future Attacks appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2025-13486 | Advanced Custom Fields Plugin up to 0.9.1.1 on WordPress prepare_form code injection (EUVD-2025-200730)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability described as critical has been identified in Advanced Custom Fields Plugin up to 0.9.1.1 on WordPress. Affected by this vulnerability is the function prepare_form. Such manipulation leads to code injection. This vulnerability is documented as CVE-2025-13486. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-65877 | Lvzhou CMS Title sql injection (EUVD-2025-200301)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability labeled as critical has been found in Lvzhou CMS. This impacts an unknown function of the component com.wanli.lvzhoucms.service.ContentService#findPage. The manipulation of the argument Title results in sql injection. This vulnerability is cataloged as CVE-2025-65877. The attack may be launched remotely. There is no exploit available. It is best practice to apply a patch to resolve this issue.
vuldb.com

CVE-2025-61729 | crypto-x509 up to 1.24.10/1.25.4 on Go HostnameError.Error resource consumption (EUVD-2025-200318 / WID-SEC-2025-2724)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability identified as problematic has been detected in crypto-x509 up to 1.24.10/1.25.4 on Go. This affects the function HostnameError.Error. The manipulation leads to resource consumption. This vulnerability is listed as CVE-2025-61729. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.
vuldb.com

CVE-2025-13721 | Google Chrome up to 142.0.7444.175 v8 race condition (ID 355120 / EUVD-2025-200303)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability categorized as problematic has been discovered in Google Chrome. The impacted element is an unknown function of the component v8. Executing manipulation can lead to race condition. This vulnerability is tracked as CVE-2025-13721. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-13640 | Google Chrome up to 142.0.7444.175 Passwords improper authentication (ID 452071)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability was found in Google Chrome. It has been rated as critical. The affected element is an unknown function of the component Passwords. Performing manipulation results in improper authentication. This vulnerability is identified as CVE-2025-13640. The attack is only possible with local access. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-13635 | Google Chrome up to 142.0.7444.175 Downloads ui layer (ID 405727 / EUVD-2025-200315)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability was found in Google Chrome. It has been declared as problematic. Impacted is an unknown function of the component Downloads. Such manipulation leads to improper restriction of rendered ui layers. This vulnerability is referenced as CVE-2025-13635. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-13634 | Google Chrome up to 142.0.7444.175 on Windows Downloads authentication spoofing (ID 429140 / EUVD-2025-200316)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability was found in Google Chrome on Windows. It has been classified as critical. This issue affects some unknown processing of the component Downloads. This manipulation causes authentication bypass by spoofing. The identification of this vulnerability is CVE-2025-13634. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2025-65379 | PHPGurukul Billing System 1.0 password-recovery.php username/mobileno sql injection (EUVD-2025-200294)

VulDB Recent Entries
1 month 2 weeks ago
A vulnerability was found in PHPGurukul Billing System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/password-recovery.php. The manipulation of the argument username/mobileno results in sql injection. This vulnerability was named CVE-2025-65379. The attack may be performed from remote. There is no available exploit.
vuldb.com

Managed ad