Medusa Blog
You must login to view this content
Aggregator
Medusa Blog
6 months 3 weeks ago
You must login to view this content
cohenido
Everest
6 months 3 weeks ago
You must login to view this content
cohenido
Everest
6 months 3 weeks ago
You must login to view this content
cohenido
CISA alert draws attention to spyware’s targeting of messaging apps
6 months 3 weeks ago
The agency’s brief notice also directed messaging app users to advice on how to protect themselves.
The post CISA alert draws attention to spyware’s targeting of messaging apps appeared first on CyberScoop.
Tim Starks
Vision Language Models Keep an Eye on Physical Security
6 months 3 weeks ago
Advancements have expanded that models' reasoning capabilities to help protect employees' physical safety.
Arielle Waldman
INC
6 months 3 weeks ago
You must login to view this content
cohenido
Qilin
6 months 3 weeks ago
You must login to view this content
cohenido
CVE-2022-50592 | Advantech iView 5.7.03.6112/5.7.03.6182 SNMP Management Tool getInventoryReportData sql injection (EUVD-2025-38177)
6 months 3 weeks ago
A vulnerability identified as critical has been detected in Advantech iView 5.7.03.6112/5.7.03.6182. This vulnerability affects unknown code of the component SNMP Management Tool. Performing manipulation of the argument getInventoryReportData results in sql injection.
This vulnerability is cataloged as CVE-2022-50592. It is possible to initiate the attack remotely. There is no exploit available.
You should upgrade the affected component.
vuldb.com
CVE-2022-50595 | Advantech iView 5.7.03.6112/5.7.03.6182 SNMP Management Tool ztp_search_value sql injection (EUVD-2025-38180)
6 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in Advantech iView 5.7.03.6112/5.7.03.6182. This impacts an unknown function of the component SNMP Management Tool. Performing manipulation of the argument ztp_search_value results in sql injection.
This vulnerability is known as CVE-2022-50595. Remote exploitation of the attack is possible. No exploit is available.
It is advisable to upgrade the affected component.
vuldb.com
CVE-2022-50591 | Advantech iView SNMP Management Tool ztp_config_id sql injection (EUVD-2025-38181)
6 months 3 weeks ago
A vulnerability was found in Advantech iView and classified as critical. This issue affects some unknown processing of the component SNMP Management Tool. Such manipulation of the argument ztp_config_id leads to sql injection.
This vulnerability is uniquely identified as CVE-2022-50591. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2022-50594 | Advantech iView SNMP Management Tool sql injection (EUVD-2025-38178)
6 months 3 weeks ago
A vulnerability was found in Advantech iView. It has been classified as critical. Impacted is an unknown function of the component SNMP Management Tool. Performing manipulation results in sql injection.
This vulnerability was named CVE-2022-50594. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is recommended.
vuldb.com
CVE-2025-13410 | Campcodes Retro Basketball Shoes Online Store 1.0 /admin/receipt.php tid sql injection
6 months 3 weeks ago
A vulnerability, which was classified as critical, was found in Campcodes Retro Basketball Shoes Online Store 1.0. Affected is an unknown function of the file /admin/receipt.php. Such manipulation of the argument tid leads to sql injection.
This vulnerability is documented as CVE-2025-13410. The attack can be executed remotely. Additionally, an exploit exists.
vuldb.com
CVE-2025-13411 | Campcodes Retro Basketball Shoes Online Store 1.0 admin_football.php product_image unrestricted upload
6 months 3 weeks ago
A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin_football.php. Performing manipulation of the argument product_image results in unrestricted upload.
This vulnerability is reported as CVE-2025-13411. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com
CVE-2025-13412 | Campcodes Retro Basketball Shoes Online Store 1.0 /admin/admin_running.php product_name cross site scripting
6 months 3 weeks ago
A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/admin_running.php. Executing manipulation of the argument product_name can lead to cross site scripting.
This vulnerability appears as CVE-2025-13412. The attack may be performed from remote. In addition, an exploit is available.
vuldb.com
CVE-2025-5452 | Axis AXIS OS up to 12.6.68 ACAP invocation of process using visible sensitive information (EUVD-2025-74042 / WID-SEC-2025-2546)
6 months 3 weeks ago
A vulnerability was found in Axis AXIS OS up to 12.6.68 and classified as critical. The affected element is an unknown function of the component ACAP Handler. Such manipulation leads to invocation of process using visible sensitive information.
This vulnerability is uniquely identified as CVE-2025-5452. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2025-5454 | Axis AXIS OS up to 12.6.17 ACAP Configuration File path traversal (EUVD-2025-74045 / WID-SEC-2025-2546)
6 months 3 weeks ago
A vulnerability was found in Axis AXIS OS up to 12.6.17. It has been declared as critical. This affects an unknown function of the component ACAP Configuration File Handler. Executing manipulation can lead to path traversal: '.../...//'.
The identification of this vulnerability is CVE-2025-5454. The attack can only be executed locally. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2022-50589 | SuiteCRM up to 7.12.5 export uid sql injection (WID-SEC-2025-2511)
6 months 3 weeks ago
A vulnerability, which was classified as critical, was found in SuiteCRM up to 7.12.5. This affects the function export. The manipulation of the argument uid results in sql injection.
This vulnerability is known as CVE-2022-50589. It is possible to launch the attack remotely. No exploit is available.
You should upgrade the affected component.
vuldb.com
CVE-2022-50590 | SuiteCRM up to 7.12.5 deleteAttachment module type confusion (WID-SEC-2025-2511)
6 months 3 weeks ago
A vulnerability has been found in SuiteCRM up to 7.12.5 and classified as critical. This vulnerability affects the function deleteAttachment. This manipulation of the argument module causes type confusion.
This vulnerability is handled as CVE-2022-50590. The attack can be initiated remotely. There is not any exploit available.
The affected component should be upgraded.
vuldb.com
The Death of Legacy MFA and What Must Rise in Its Place
6 months 3 weeks ago
Tycoon 2FA proves that the old promises of “strong MFA” came with fine print all along: when an attacker sits invisibly in the middle, your codes, pushes, and one-time passwords become their codes, pushes, and one-time passwords too. Tycoon 2FA: Industrial-Scale Phishing Comes of Age Tycoon 2FA delivers a phishing-as-a-service kit that hands even modestly..
The post The Death of Legacy MFA and What Must Rise in Its Place appeared first on Security Boulevard.
Jack Poller