Aggregator

CVE-2025-37912 | Linux Kernel up to 292081c4e7f575a79017d5cbe1a0ec042783976f ice_vc_add_fdir_fltr null pointer dereference (Nessus ID 237223 / WID-SEC-2025-1114)

Vuldb Updates
11 months 3 weeks ago
A vulnerability labeled as critical has been found in Linux Kernel up to 292081c4e7f575a79017d5cbe1a0ec042783976f. The impacted element is the function ice_vc_add_fdir_fltr. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2025-37912. Access to the local network is required for this attack. No exploit is available. The affected component should be upgraded.
vuldb.com

CVE-2025-37914 | Linux Kernel up to 6.15-rc4 net_sched memory corruption (EUVD-2025-15922 / Nessus ID 237223)

Vuldb Updates
11 months 3 weeks ago
A vulnerability marked as critical has been reported in Linux Kernel up to 6.15-rc4. This affects an unknown function of the component net_sched. This manipulation causes memory corruption. This vulnerability is handled as CVE-2025-37914. The attack can only be done within the local network. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-37913 | Linux Kernel up to 6.15-rc4 net_sched memory corruption (EUVD-2025-15944 / Nessus ID 237223)

Vuldb Updates
11 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.15-rc4. Affected by this issue is some unknown functionality of the component net_sched. The manipulation leads to memory corruption. This vulnerability is referenced as CVE-2025-37913. The attack needs to be initiated within the local network. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-37915 | Linux Kernel up to 6.15-rc4 net_sched use after free (EUVD-2025-15931 / Nessus ID 237223)

Vuldb Updates
11 months 3 weeks ago
A vulnerability has been found in Linux Kernel up to 6.15-rc4 and classified as critical. This vulnerability affects unknown code of the component net_sched. This manipulation causes use after free. This vulnerability is tracked as CVE-2025-37915. The attack is only possible within the local network. No exploit exists. The affected component should be upgraded.
vuldb.com

CVE-2025-37889 | Linux Kernel Global Variable pci_msi_domain_supports null pointer dereference (Nessus ID 237504 / WID-SEC-2025-0999)

Vuldb Updates
11 months 3 weeks ago
A vulnerability identified as critical has been detected in Linux Kernel. The affected element is the function pci_msi_domain_supports of the component Global Variable Handler. This manipulation causes null pointer dereference. The identification of this vulnerability is CVE-2025-37889. The attack needs to be done within the local network. There is no exploit available. Applying a patch is the recommended action to fix this issue.
vuldb.com

A Perfect Storm: DDoS Attack Hits Turkish Luxury Retailer During Fall Collection Launch

Security Boulevard
11 months 3 weeks ago

When high-stakes events meet unprecedented attack volumes, disruption can be devastating. A Turkish luxury retail platform experienced this firsthand when it was hit with a record-breaking application-layer DDoS attack, peaking at 14.2 million requests per second (RPS). This marks the largest DDoS attack Imperva has observed to date. The timing wasn’t accidental. The attack began […]

The post A Perfect Storm: DDoS Attack Hits Turkish Luxury Retailer During Fall Collection Launch appeared first on Blog.

The post A Perfect Storm: DDoS Attack Hits Turkish Luxury Retailer During Fall Collection Launch appeared first on Security Boulevard.

Gabi Sharadin

Pig-Butchering Scams Operators Scaled Their Operations with The Support of AI-Assistants

Cyber Security News
11 months 3 weeks ago

Pig-butchering scams have grown into one of the most damaging global cybercrime threats, causing billions of dollars in losses every year. These long-term investment fraud schemes work by building trust through emotional grooming and fake trading platforms before draining victims of their life savings. The scams now operate at an industrial scale, and criminal groups […]

The post Pig-Butchering Scams Operators Scaled Their Operations with The Support of AI-Assistants appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2024-46334 | Kashipara School Management System 1.0 /adminLogin.php formpassword cross site scripting (EUVD-2024-55086)

Vuldb Updates
11 months 3 weeks ago
A vulnerability described as problematic has been identified in Kashipara School Management System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument formpassword leads to cross site scripting. This vulnerability is documented as CVE-2024-46334. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-64309 | Brightpick AI Mission Control WebSocket unprotected transport of credentials (EUVD-2025-197664)

Vuldb Updates
11 months 3 weeks ago
A vulnerability described as problematic has been identified in Brightpick AI Mission Control. Affected is an unknown function of the component WebSocket Handler. Such manipulation leads to unprotected transport of credentials. This vulnerability is referenced as CVE-2025-64309. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2025-59780 | General Industrial Controls Lynx+ Gateway R08/V03/V05/V18 missing authentication (icsa-25-317-08 / EUVD-2025-197668)

Vuldb Updates
11 months 3 weeks ago
A vulnerability categorized as critical has been discovered in General Industrial Controls Lynx+ Gateway R08/V03/V05/V18. This impacts an unknown function. The manipulation results in missing authentication. This vulnerability is known as CVE-2025-59780. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2025-13319 | Nettec Digi On-Prem Manager prior 25.08.5 API Feature input validation (EUVD-2025-197807)

Vuldb Updates
11 months 3 weeks ago
A vulnerability was found in Nettec Digi On-Prem Manager. It has been classified as very critical. This affects an unknown function of the component API Feature. This manipulation causes improper input validation. The identification of this vulnerability is CVE-2025-13319. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2025-62765 | General Industrial Controls Lynx+ Gateway R08/V03/V05/V18 cleartext transmission (icsa-25-317-08 / EUVD-2025-197667)

Vuldb Updates
11 months 3 weeks ago
A vulnerability identified as problematic has been detected in General Industrial Controls Lynx+ Gateway R08/V03/V05/V18. Affected is an unknown function. This manipulation causes cleartext transmission of sensitive information. This vulnerability is handled as CVE-2025-62765. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2025-58410 | Imagination Graphics DDK up to 25.1 RTM2/25.2 RTM insufficient permissions or privileges (EUVD-2025-197806)

Vuldb Updates
11 months 3 weeks ago
A vulnerability identified as problematic has been detected in Imagination Graphics DDK up to 25.1 RTM2/25.2 RTM. Affected by this issue is some unknown functionality. The manipulation leads to improper handling of insufficient permissions or privileges. This vulnerability is listed as CVE-2025-58410. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.
vuldb.com

CVE-2025-64308 | Brightpick AI Mission Control JavaScript Bundle unprotected transport of credentials (EUVD-2025-197665)

Vuldb Updates
11 months 3 weeks ago
A vulnerability classified as problematic was found in Brightpick AI Mission Control. This issue affects some unknown processing of the component JavaScript Bundle. The manipulation results in unprotected transport of credentials. This vulnerability is identified as CVE-2025-64308. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-62519 | thorsten phpMyFAQ up to 4.0.13 sql injection (GHSA-fxm2-cmwj-qvx4 / EUVD-2025-197804)

Vuldb Updates
11 months 3 weeks ago
A vulnerability categorized as critical has been discovered in thorsten phpMyFAQ up to 4.0.13. Affected by this vulnerability is an unknown functionality. Executing manipulation can lead to sql injection. This vulnerability is tracked as CVE-2025-62519. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

Managed ad