Aggregator

看雪论坛作者ID：东方玻璃

A vulnerability was found in Apache HTTP Server up to 1.3.23/2.0.34-beta on Win32. It has been classified as critical. Affected is an unknown function. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2002-0061. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Two major security vulnerabilities have been found in the widely used GIMP image editing software, potentially allowing remote attackers to execute arbitrary code on affected systems, according to security researchers. The vulnerabilities, labeled CVE-2025-2760 and CVE-2025-2761, each have a high CVSS score of 7.8 and impact users who open malicious image files or visit compromised […]

The post GIMP Image Editor Vulnerability Allows Remote Attackers to Execute Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Threat hunters have exposed a novel campaign that makes use of search engine optimization (SEO) poisoning techniques to target employee mobile devices and facilitate payroll fraud. The activity, first detected by ReliaQuest in May 2025 targeting an unnamed customer in the manufacturing sector, is characterized by the use of fake login pages to access the employee payroll portal and redirect

Компания представила обновлённый набор сервисов для проактивного противодействия киберугрозам.

Microsoft Threat Intelligence has discovered a cluster of worldwide cloud abuse activity conducted by a threat actor we track as Void Blizzard, who we assess with high confidence is Russia-affiliated and has been active since at least April 2024. Void Blizzard’s cyberespionage operations tend to be highly targeted at specific organizations of interest to Russia, including in government, defense, transportation, media, non-governmental organizations (NGOs), and healthcare sectors primarily in Europe and North America.

The post New Russia-affiliated actor Void Blizzard targets critical sectors for espionage appeared first on Microsoft Security Blog.

Microsoft Threat Intelligence has discovered a cluster of worldwide cloud abuse activity conducted by a threat actor we track as Void Blizzard, who we assess with high confidence is Russia-affiliated and has been active since at least April 2024. Void Blizzard’s cyberespionage operations tend to be highly targeted at specific organizations of interest to Russia, including in government, defense, transportation, media, non-governmental organizations (NGOs), and healthcare sectors primarily in Europe and North America.

The post New Russia-affiliated actor Void Blizzard targets critical sectors for espionage appeared first on Microsoft Security Blog.

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.0. Affected is an unknown function of the component LITERAL Command Handler. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2025-5218. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component ASCII Command Handler. The manipulation leads to buffer overflow. This vulnerability is known as CVE-2025-5219. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the component GET Command Handler. The manipulation leads to buffer overflow. This vulnerability is handled as CVE-2025-5220. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in IBM Controller and Cognos Controller 11.0.0/11.0.1/11.1.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to unprotected storage of credentials. This vulnerability is handled as CVE-2025-33079. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in SIGB PMB. Affected by this vulnerability is an unknown functionality. The manipulation leads to path traversal. This vulnerability is known as CVE-2025-48744. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in SUSE Manager Server Module 4.3. It has been classified as problematic. Affected is an unknown function. The manipulation leads to basic cross site scripting. This vulnerability is traded as CVE-2025-23393. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mobatime AMX MTAPI and AMXGT-100. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Web API. The manipulation leads to missing authentication. This vulnerability is known as CVE-2025-2407. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in MStore API Plugin up to 4.17.5 on WordPress. This affects the function create_blog. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2025-4683. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Essential Blocks Plugin up to 5.4.0 on WordPress. It has been declared as problematic. This vulnerability affects unknown code of the component Slider Widget/Post Carousel Widget. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-4682. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in D-Link DCS-5020L 1.01_B2. This affects the function websReadEvent of the file /rame/ptdc.cgi. The manipulation of the argument Authorization leads to stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is uniquely identified as CVE-2025-5215. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument ID leads to sql injection. This vulnerability was named CVE-2025-5216. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.0. This issue affects some unknown processing of the component RMDIR Command Handler. The manipulation leads to buffer overflow. The identification of this vulnerability is CVE-2025-5217. The attack may be initiated remotely. Furthermore, there is an exploit available.