Aggregator

CVE-2025-34045 | Shenzhen Yuanmengyun WeiPHP 5.0 POST _download_imgage picUrl path traversal (CNVD-2020-68596 / EUVD-2025-19209)

Vuldb Updates
7 months 1 week ago
A vulnerability was found in Shenzhen Yuanmengyun WeiPHP 5.0. It has been rated as critical. The impacted element is an unknown function of the file /public/index.php/material/Material/_download_imgage of the component POST Handler. Performing manipulation of the argument picUrl results in path traversal. This vulnerability was named CVE-2025-34045. The attack may be initiated remotely. There is no available exploit.
vuldb.com

CVE-2025-34042 | Beward N100 IP Camera M2.1.6.04C014 servetest CGI Page ServerName/TimeZone os command injection (EUVD-2025-19212)

Vuldb Updates
7 months 1 week ago
A vulnerability marked as critical has been reported in Beward N100 IP Camera M2.1.6.04C014. Affected by this vulnerability is an unknown functionality of the component servetest CGI Page. This manipulation of the argument ServerName/TimeZone causes os command injection. This vulnerability is tracked as CVE-2025-34042. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2025-34040 | Beijing Zhiyuan Internet OA up to 8.0sp2 wpsAssistServlet Interface realFileType/fileId unrestricted upload (EUVD-2025-19043)

Vuldb Updates
7 months 1 week ago
A vulnerability was found in Beijing Zhiyuan Internet OA up to 8.0sp2 and classified as critical. This issue affects some unknown processing of the component wpsAssistServlet Interface. Executing manipulation of the argument realFileType/fileId can lead to unrestricted upload. This vulnerability is tracked as CVE-2025-34040. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2025-34041 | Sangfor Endpoint Detection and Response Platform 3.2.16/3.2.17/3.2.19 EDR Manager interface os command injection (EUVD-2025-18973)

Vuldb Updates
7 months 1 week ago
A vulnerability has been found in Sangfor Endpoint Detection and Response Platform 3.2.16/3.2.17/3.2.19 and classified as critical. The affected element is an unknown function of the component EDR Manager interface. The manipulation leads to os command injection. This vulnerability is referenced as CVE-2025-34041. The attack needs to be initiated within the local network. No exploit is available.
vuldb.com

CVE-2025-34320 | BASIS International BBj up to 24.x BBj Service path traversal (EUVD-2025-198301)

Vuldb Updates
7 months 1 week ago
A vulnerability was found in BASIS International BBj up to 24.x. It has been declared as critical. This affects an unknown function of the component BBj Service. The manipulation results in path traversal. This vulnerability is identified as CVE-2025-34320. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-52410 | Institute-of-Current-Students 1.0 GET Parameter mydetailsstudent.php myds sql injection (EUVD-2025-198302)

Vuldb Updates
7 months 1 week ago
A vulnerability has been found in Institute-of-Current-Students 1.0 and classified as critical. This affects an unknown function of the file mydetailsstudent.php of the component GET Parameter Handler. The manipulation of the argument myds leads to sql injection. This vulnerability is uniquely identified as CVE-2025-52410. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

Akira

Dark Feed IO
7 months 1 week ago

You must login to view this content

cohenido

CLOP

Dark Feed IO
7 months 1 week ago

You must login to view this content

cohenido

Radar

Dark Feed IO
7 months 1 week ago

You must login to view this content

cohenido

Morpheus on Microsoft: AI SOC Platform for MSSPs Managing Sentinel, Defender, Entra, and More

Security Boulevard
7 months 1 week ago

Morpheus automates Tier 1 and Tier 2 SOC work across Microsoft Sentinel, Defender, and Entra ID. Scale your MSSP, maintain SLA compliance and service quality.

The post Morpheus on Microsoft: AI SOC Platform for MSSPs Managing Sentinel, Defender, Entra, and More appeared first on D3 Security.

The post Morpheus on Microsoft: AI SOC Platform for MSSPs Managing Sentinel, Defender, Entra, and More appeared first on Security Boulevard.

Shriram Sharma

CVE-2025-13226 | Google Chrome up to 141.0.7390.122 V8 type confusion (ID 446113 / Nessus ID 275722)

Vuldb Updates
7 months 1 week ago
A vulnerability was found in Google Chrome. It has been classified as critical. Affected by this issue is some unknown functionality of the component V8. The manipulation leads to type confusion. This vulnerability is traded as CVE-2025-13226. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2024-7314 | anji-plus AJ-Report up to 1.4.0 HTTP Request /swagger-ui insufficient permissions or privileges (EUVD-2024-48255)

Vuldb Updates
7 months 1 week ago
A vulnerability classified as critical has been found in anji-plus AJ-Report up to 1.4.0. Affected is an unknown function of the component HTTP Request Handler. The manipulation of the argument /swagger-ui leads to improper handling of insufficient permissions or privileges. This vulnerability is listed as CVE-2024-7314. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

Salesforce investigates new incident echoing Salesloft Drift compromise

Help Net Security
7 months 1 week ago

In what may be a repeat of the Salesloft Drift supply chain compromise, Salesforce confirmed that they’ve identified unusual activity involving Gainsight-published apps connected to Salesforce. “Our investigation indicates this activity may have enabled unauthorized access to certain customers’ Salesforce data through the app’s connection. Upon detecting the activity, Salesforce revoked all active access and refresh tokens associated with Gainsight-published applications connected to Salesforce and temporarily removed those applications from the AppExchange while our investigation … More →

The post Salesforce investigates new incident echoing Salesloft Drift compromise appeared first on Help Net Security.

Zeljka Zorz

Managed ad