Aggregator

Submit #698771 / VDB-333339

Submit #698769 / VDB-333339

A vulnerability marked as critical has been reported in code-projects Online Bidding System 1.0. This issue affects the function categoryadd of the file /administrator/addcategory.php. This manipulation of the argument catimage causes unrestricted upload. This vulnerability is tracked as CVE-2025-13574. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability, which was classified as problematic, was found in Linux Kernel 6.2. This issue affects the function sleeping of the file drivers/tty/n_gsm.c. Such manipulation leads to denial of service. This vulnerability is traded as CVE-2023-31082. Access to the local network is required for this attack to succeed. Furthermore, there is an exploit available.

A vulnerability marked as critical has been reported in Linux Kernel up to 5.4.239/5.10.176/5.15.104/6.1.21/6.2.8. This affects an unknown function of the file kernel/dma/mapping.c. Performing manipulation results in denial of service. This vulnerability is reported as CVE-2023-53041. The attacker must have access to the local network to execute the attack. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.10.137/5.15.62/5.19.3. The impacted element is an unknown function of the component ceph. The manipulation results in deadlock. This vulnerability is identified as CVE-2022-50059. The attack can only be performed from the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability was found in OpenPrinting cups-filters and libcupsfilters. It has been classified as critical. The affected element is an unknown function of the component pdftoraster. This manipulation causes out-of-bounds write. The identification of this vulnerability is CVE-2025-64503. The attack can only be executed locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

Master incident response communication with proven frameworks that align teams, accelerate decisions, and minimize business impact during cyber crises.

The post Developing Incident Response Team Communication and Coordination Practices appeared first on Sygnia.

Submit #698718 / VDB-333338

Submit #698717 / VDB-333338

Submit #698716 / VDB-313575

A vulnerability labeled as critical has been found in projectworlds can pass malicious payloads up to 1.0. This vulnerability affects unknown code of the file /add_book.php. The manipulation of the argument image results in unrestricted upload. This vulnerability is identified as CVE-2025-13573. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability identified as critical has been detected in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /delete_admin.php. The manipulation of the argument admin_id leads to sql injection. This vulnerability is referenced as CVE-2025-13572. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Submit #698646 / VDB-333337

Submit #698645 / VDB-333336

Submit #698640 / VDB-250571

A Practical Guide to Uncovering Hidden Vulnerabilities in Modern Signup SystemsPress enter or click

A Practical Guide to Uncovering Hidden Vulnerabilities in Modern Signup SystemsPress enter or click

New StorybyTechBeatbyTechBeat@techbeatHackerNoon’s rank of trending tech stories based on pageviews

Архитектура доверия обернулась катастрофой.