Aggregator

构建患者隐私与医疗数据安全的密码基座。

Microsoft this week pushed security updates to fix more than 60 vulnerabilities in its Windows operating systems and supported software, including at least one zero-day bug that is already being exploited. Microsoft also fixed a glitch that prevented some Windows 10 users from taking advantage of an extra year of security updates, which is nice because the zero-day flaw and other critical weaknesses patched today affect all versions of Windows, including Windows 10.

Five pleaded guilty to aiding North Korea ’s illicit revenue via IT worker fraud, violating international sanctions. The U.S. Department of Justice announced that five people have pleaded guilty to helping North Korea secretly generate revenue by running illegal IT-worker schemes that violated international sanctions. The individuals – Audricus Phagnasay (24), Jason Salazar (30), Alexander […]

A vulnerability, which was classified as critical, was found in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing manipulation of the argument Username can lead to sql injection. The identification of this vulnerability is CVE-2025-13280. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. This vulnerability was named CVE-2025-13279. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability classified as critical was found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrowed_book_search.php. Such manipulation of the argument datefrom/dateto leads to sql injection. This vulnerability is uniquely identified as CVE-2025-13278. The attack can be launched remotely. Moreover, an exploit is present.

Submit #691538 / VDB-259068

A vulnerability classified as critical has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. This vulnerability is handled as CVE-2025-13277. The attack can be initiated remotely. Additionally, an exploit exists.

Submit #691380 / VDB-332615

A vulnerability described as critical has been identified in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. This vulnerability is known as CVE-2025-13276. It is possible to launch the attack remotely. Furthermore, an exploit is available. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

Submit #691007 / VDB-309043

Submit #690963 / VDB-332614

Submit #690797 / VDB-332613

Submit #690140 / VDB-332612

Submit #690087 / VDB-332611

Машина, которая сама ищет и правит свои ошибки.

A vulnerability marked as critical has been reported in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2025-13275. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

A vulnerability labeled as critical has been found in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_fees. Executing manipulation of the argument ID can lead to sql injection. This vulnerability appears as CVE-2025-13274. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability identified as critical has been detected in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_payment. Performing manipulation of the argument ID results in sql injection. This vulnerability is reported as CVE-2025-13273. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability categorized as critical has been discovered in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /manage_course.php. Such manipulation of the argument ID leads to sql injection. This vulnerability is documented as CVE-2025-13272. The attack can be executed remotely. Additionally, an exploit exists.