Aggregator

CVE-2025-54386 | Traefik up to 2.11.27/3.4.4/3.5.0-rc1 ZIP Archive path traversal (GHSA-q6gg-9f92-r9wg / EUVD-2025-23415)

Vuldb Updates
6 months 3 weeks ago
A vulnerability categorized as critical has been discovered in Traefik up to 2.11.27/3.4.4/3.5.0-rc1. The impacted element is an unknown function of the component ZIP Archive Handler. Such manipulation leads to path traversal. This vulnerability is listed as CVE-2025-54386. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

CVE-2024-2946 | devitemsllc ShopLentor Plugin up to 2.8.4 on WordPress QR Code Widget cross site scripting

Vuldb Updates
6 months 3 weeks ago
A vulnerability was found in devitemsllc ShopLentor Plugin up to 2.8.4 on WordPress. It has been rated as problematic. Affected is an unknown function of the component QR Code Widget. Performing manipulation results in cross site scripting. This vulnerability is reported as CVE-2024-2946. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2025-65957 | Intercore-Productions Core-Bot Configuration SUPABASE_API_KEY/TOKEN information disclosure (GHSA-42j6-x28v-38r8 / CNNVD-202511-2819)

Vuldb Updates
6 months 3 weeks ago
A vulnerability classified as problematic has been found in Intercore-Productions Core-Bot. The impacted element is an unknown function of the component Configuration Handler. Performing manipulation of the argument SUPABASE_API_KEY/TOKEN results in information disclosure. This vulnerability is cataloged as CVE-2025-65957. It is possible to initiate the attack remotely. There is no exploit available. Applying a patch is the recommended action to fix this issue.
vuldb.com

CVE-2025-65963 | humhub cfiles up to 0.16.10/0.17.1 access control (GHSA-rv2x-7qwp-2hf4 / CNNVD-202511-2818)

Vuldb Updates
6 months 3 weeks ago
A vulnerability categorized as critical has been discovered in humhub cfiles up to 0.16.10/0.17.1. Impacted is an unknown function. The manipulation results in improper access controls. This vulnerability was named CVE-2025-65963. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

Akira

Dark Feed IO
6 months 3 weeks ago

You must login to view this content

cohenido

Akira

Dark Feed IO
6 months 3 weeks ago

You must login to view this content

cohenido

Akira

Dark Feed IO
6 months 3 weeks ago

You must login to view this content

cohenido

CVE-2025-59390 | Apache Druid up to 34.0.0 Kerberos cryptographic issues (EUVD-2025-199714)

Vuldb Updates
6 months 3 weeks ago
A vulnerability, which was classified as problematic, was found in Apache Druid up to 34.0.0. This affects an unknown function of the component Kerberos. The manipulation results in cryptographic issues. This vulnerability is cataloged as CVE-2025-59390. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.
vuldb.com

CVE-2025-12061 | Tax Service Electronic HDM Plugin up to 1.2.0 on WordPress cross-site request forgery (EUVD-2025-199709)

Vuldb Updates
6 months 3 weeks ago
A vulnerability was found in Tax Service Electronic HDM Plugin up to 1.2.0 on WordPress and classified as problematic. Affected is an unknown function. Such manipulation leads to cross-site request forgery. This vulnerability is documented as CVE-2025-12061. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-62728 | Apache Hive up to 4.1.x HMS Thrift API sql injection (EUVD-2025-199715)

Vuldb Updates
6 months 3 weeks ago
A vulnerability was found in Apache Hive up to 4.1.x. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component HMS Thrift API. Performing manipulation results in sql injection. This vulnerability is reported as CVE-2025-62728. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.
vuldb.com

Gain Real-time Visibility to Future Proof Your Network for Autonomous Operations

Netscout
6 months 3 weeks ago
Research shows that networks are becoming progressively more autonomous in an effort to support efficiency and adaptability for advanced use cases. To continue the journey to full autonomous operations within the dynamic 5G ecosystem and beyond, networks need better data sources. High-fidelity curated data can provide...
Agnes Mends-Crentsil

FBI Warns of Fake Internet Crime Complaint Center (IC3) Website Used for Phishing Attacks

Cyber Security News
6 months 3 weeks ago

The Federal Bureau of Investigation (FBI) has issued urgent warnings about cybercriminals spoofing the official Internet Crime Complaint Center (IC3) website to conduct phishing attacks and steal sensitive personal information. These fake sites mimic the legitimate www.ic3.gov portal with near-perfect replicas, borrowing content, layouts, and visuals to deceive users into submitting names, addresses, phone numbers, […]

The post FBI Warns of Fake Internet Crime Complaint Center (IC3) Website Used for Phishing Attacks appeared first on Cyber Security News.

Guru Baran

Managed ad