Aggregator

近日，京东安全獬豸实验室在 Black Hat Asia 2025 上，与参会者探讨了 Kubernetes Extension API Server 在特定场景下存在的安全漏洞，以及如何开发一款工具来发现潜在的 K8S API 安全风险。

快速浏览！2025.4.21—4.27安全动态周回顾。

Scallywag是一个围绕四个WordPress插件建立的欺诈即服务运营，帮助网络罪犯从高风险和低质量的网站中赚钱。

I investigate network traffic from a Triage sandbox execution of njRAT in this video. The analysis is performed using NetworkMiner in Linux (REMnux to be specific). About njRAT / Bladabindi njRAT is a Remote Access Trojan (RAT) that can be used to remotely control a hacked computer. It has been arou[...]

Submit #559297 / VDB-306397

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. This vulnerability was named CVE-2025-4031. The attack can be initiated remotely. Furthermore, there is an exploit available.

Из попытки повысить эффективность вырос идеальный подарок для хакеров.

Submit #559239 / VDB-306396

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. This affects an unknown part of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. This vulnerability is uniquely identified as CVE-2025-4030. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Submit #559222 / VDB-306395

A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of the component New Record Handler. The manipulation of the argument filename leads to stack-based buffer overflow. This vulnerability is handled as CVE-2025-4029. Local access is required to approach this attack. Furthermore, there is an exploit available.

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. This vulnerability is known as CVE-2025-4028. The attack can be launched remotely. Furthermore, there is an exploit available. Other parameters might be affected as well.

Submit #559221 / VDB-306394

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/rules.php. The manipulation of the argument pagetitle leads to sql injection. This vulnerability is traded as CVE-2025-4027. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Submit #559199 / VDB-306393

A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument adminname leads to sql injection. The identification of this vulnerability is CVE-2025-4026. The attack may be initiated remotely. Furthermore, there is an exploit available.

Submit #559198 / VDB-306392

Submit #559193 / VDB-306391

A vulnerability classified as problematic was found in Ververica Platform 2.14.0. This vulnerability affects unknown code of the file namespaces/default/formats. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-46689. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Ververica Platform 2.14.0. This affects an unknown part of the file namespaces/default/formats. The manipulation leads to direct request. This vulnerability is uniquely identified as CVE-2025-46690. It is possible to initiate the attack remotely. There is no exploit available.