Aggregator

Submit #691625 / VDB-283464

A vulnerability was found in Campcodes School Fees Payment Management System 1.0. It has been classified as critical. Impacted is an unknown function of the file /ajax.php?action=save_student. The manipulation of the argument ID leads to sql injection. This vulnerability is listed as CVE-2025-13057. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in SourceCodester Alumni Management System 1.0. It has been rated as critical. The impacted element is an unknown function of the file /manage_career.php. This manipulation of the argument ID causes sql injection. This vulnerability is registered as CVE-2025-13059. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability categorized as critical has been discovered in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such manipulation of the argument ID leads to sql injection. This vulnerability is documented as CVE-2025-13060. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability identified as critical has been detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=manage_voting. Performing manipulation results in unrestricted upload. This vulnerability is reported as CVE-2025-13061. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability was found in Fabian Ros/SourceCodester Simple E-Banking System 1.0. It has been classified as problematic. This affects an unknown part. This manipulation causes cross-site request forgery. This vulnerability appears as CVE-2025-13119. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability labeled as problematic has been found in Dell Alienware Command Center 5.5.51.0/5.8.2.0/5.10.2.0/6.2.7.0/6.7.37.0. This impacts an unknown function. Executing manipulation can lead to process control. This vulnerability is registered as CVE-2025-46370. The attack needs to be launched locally. No exploit is available. The affected component should be upgraded.

A vulnerability described as problematic has been identified in Dell Alienware Command Center 5.5.51.0/5.8.2.0/5.10.2.0/6.2.7.0/6.7.37.0. Affected by this vulnerability is an unknown functionality. The manipulation results in insecure temporary file. This vulnerability is reported as CVE-2025-46368. The attack requires a local approach. No exploit exists. Upgrading the affected component is recommended.

A vulnerability classified as critical was found in Dell Alienware Command Center 5.5.51.0/5.8.2.0/5.10.2.0/6.2.7.0/6.7.37.0. This affects an unknown part. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2025-46362. An attack has to be approached locally. There is no exploit available. Upgrading the affected component is advised.

A vulnerability described as critical has been identified in code-projects Simple Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /add_query_reserve.php. Such manipulation of the argument room_id leads to sql injection. This vulnerability is documented as CVE-2025-13169. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability classified as critical has been found in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/edit_account.php. Performing manipulation of the argument admin_id results in sql injection. This vulnerability is reported as CVE-2025-13170. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability has been found in SourceCodester Patients Waiting Area Queue Management System 1.0 and classified as critical. The affected element is the function getPatientAppointment of the file /php/api_patient_checkin.php. Performing manipulation of the argument appointmentID results in sql injection. This vulnerability is cataloged as CVE-2025-13122. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

近期，LLM-Red-Team关联的开源仓库及多个GitHub项目遭遇针对性供应链攻击，引发了开发者社区对代码安全的集中警惕。图1 事件最初由开发者社区用户披露——在LLM-Red-Team旗下的1k star 的qwen-free-api，同帐号下的接近5k star的kimi-free-api等几个工程，仓库中，存在一段高度隐蔽的恶意代码：图2 这段代码被藏在chat.ts文件的最后一行，前置了大量空白字符以降低被察觉的概率，且即便删除该代码，项目仍能正常运行。图5图6 针对此情况，该仓库的主要维护者表示：其本地代码、IDE历史记录，以及同步至Gitee平台的代码版本中均无此恶意代码，目前正调查GitHub仓库提交记录被篡改的具体原因，初步认为是rand-user-agent导致，和下文参考链接提及的手法有一致性，用过相关账号下的所有工程的一定要自查电脑。图3图4 随着调查推进，安全研究者发现此次攻击并非个例——同一威胁者已攻陷至少19个GitHub仓库，目前已公开的9个仓库信息 图9 经安全团队溯源，此次攻击的威胁者，与此前向rand-user-agent等npm包投毒的是同一团伙。其攻击路径为：图7 借助已被投毒的依赖包作为“跳板”，通过篡改仓库提交历史的方式，将远程访问木马（RAT）等恶意代码隐蔽植入仓库分支——比如qwen-free-api中藏在文件末尾的代码，正是这种“伪装合法提交”手法的体现。 由于恶意代码被伪装成正常的仓库提交记录，克隆、使用这些受影响仓库的用户，会在不知情的情况下同步安装恶意程序，最终导致设备被远程控制、个人敏感信息或系统数据被窃取。 为降低安全风险，开发者社区及相关用户需采取以下行动： 1. 立即停止使用上述受影响仓库的代码与服务，直接删除本地、服务器上的相关仓库文件； 2. 核对自身使用的仓库提交记录，若包含对应恶意哈希，需彻底清理相关代码、依赖包及本地包管理缓存； 3. 后续避免使用长期未维护的开源仓库，并开启GitHub仓库的“提交签名验证”功能，防范提交记录被篡改； 4. 定期扫描本地系统进程与文件，清理已知恶意路径。 参考链接:图8 https://thenimblenerd.com/article/npm-supply-chain-attack-gluestack-packages-infected-with-sneaky-rat-malware/ #供应链攻击

This week showed just how fast things can go wrong when no one’s watching. Some attacks were silent and sneaky. Others used tools we trust every day — like AI, VPNs, or app stores — to cause damage without setting off alarms. It’s not just about hacking anymore. Criminals are building systems to make money, spy, or spread malware like it’s a business. And in some cases, they’re using the same

A vulnerability classified as critical was found in xwiki-platform up to 15.10.10/16.4.0. Impacted is an unknown function of the file /xwiki/bin/get/Main/SolrSearch?media=rss&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28"Hello%20from"%20%2B%20"%20search%20text%3A"%20%2B%20%2823%20%2B%2019%29%29%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20. Executing manipulation can lead to improper neutralization of directives in dynamically evaluated code. This vulnerability is tracked as CVE-2025-24893. The attack can be launched remotely. Moreover, an exploit is present. Upgrading the affected component is advised.

In November 2025, a new malware campaign emerged that combines social engineering tricks with advanced stealing tools. The attack starts when criminals trick users into running commands through the Windows Run window, a technique known as ClickFix. Once users follow these instructions, their computers become infected with Amatera Stealer, an advanced piece of malware designed […]

The post EVALUSION Campaign Using ClickFix Technique to deploy Amatera Stealer and NetSupport RAT appeared first on Cyber Security News.

As artificial intelligence infrastructure rapidly expands, critical security flaws threaten the backbone of enterprise AI deployments. Security researchers at Oligo Security have uncovered a series of dangerous Remote Code Execution (RCE) vulnerabilities affecting major AI frameworks from Meta, NVIDIA, Microsoft, and PyTorch projects, including vLLM and SGLang. The vulnerabilities, collectively termed “ShadowMQ,” stem from the […]

The post Critical RCE Vulnerabilities in AI Inference Engines Exposes Meta, Nvidia and Microsoft Frameworks appeared first on Cyber Security News.

Новый отчёт раскрывает идеальный тайминг хакеров, которые удаляют EDR-защиту за минуты.

Приглашаем на вебинар, где эксперты «Инфосистемы Джет» поделятся реальным опытом и сценариями создания эффективной защиты от атак на промышленные компании.