Aggregator

CVE-2025-13267 | SourceCodester Dental Clinic Appointment Reservation System 1.0 /success.php username/password sql injection (EUVD-2025-197768)

VulDB Recent Entries
11 months 3 weeks ago
A vulnerability has been found in SourceCodester Dental Clinic Appointment Reservation System 1.0 and classified as critical. Impacted is an unknown function of the file /success.php. Performing manipulation of the argument username/password results in sql injection. This vulnerability is identified as CVE-2025-13267. The attack can be initiated remotely. Additionally, an exploit exists.
vuldb.com

CVE-2025-13266 | wwwlike vlife up to 2.0.1 VLifeApi SysFileApi.java create fileName path traversal (EUVD-2025-197763)

VulDB Recent Entries
11 months 3 weeks ago
A vulnerability, which was classified as problematic, was found in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. This vulnerability is referenced as CVE-2025-13266. It is possible to launch the attack remotely. Furthermore, an exploit is available.
vuldb.com

CVE-2025-13265 | lsfusion platform up to 6.1 ZipUtils.java unpackFile path traversal (Issue 1545 / EUVD-2025-197766)

VulDB Recent Entries
11 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. This manipulation causes path traversal. The identification of this vulnerability is CVE-2025-13265. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 71

Security Affairs
11 months 3 weeks ago
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter 9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads GlassWorm Returns: New Wave Strikes as We Expose Attacker Infrastructure Gootloader Returns: What Goodies Did They Bring? Active Water Saci Campaign Spreading Via WhatsApp Features Multi-Vector […]
Pierluigi Paganini

Security Affairs newsletter Round 550 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs
11 months 3 weeks ago
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Multiple Vulnerabilities in GoSign Desktop lead to Remote Code Execution U.S. CISA adds Fortinet FortiWeb flaw to […]
Pierluigi Paganini

数据安全意识培训：守护数字生命线

信息安全知识库
11 months 3 weeks ago
本文链接


《数据安全意识培训：守护数字生命线》面向产品与研发全员，重新定义数据安全是产品特性而非负担。课程围绕机密性、完整性、可用性三大基石，给出可落地的“安全左移”实践：需求阶段做威胁建模与数据分类，编码阶段用参数化查询、bcrypt 哈希和 CI/CD 自动扫描，部署阶段实施基础设施即代码安全、密钥托管与日志脱敏，运营阶段持续监控、限流防爬并闭环漏洞。通过越权访问、硬编码密钥、日志泄露三大真实案例，演示设计疏忽如何演变为百万罚款与勒索事件，并提供产品经理、研发工程师、通用办公三张速查卡，让“谁该看到什么数据”成为日常共识。培训最后发出“黄金三步法”应急号召：断网-报告-改密，强调“安全无小事，从一行代码、一个设计决策做起”，帮助团队把数据保护写进需求、融入编码、落到运维，共筑企业数字生命线。

数据安全，你我共筑的防火墙

信息安全知识库
11 months 3 weeks ago
本文链接


《数据安全，你我共筑的防火墙》以“公共卫生”作喻，用鲜活案例拆解四大“数据杀手”：钓鱼邮件、弱密码复用、公共Wi-Fi与内部泄密，指出九成泄露源于日常疏忽。课程给出 4 套可立即落地的“金钥匙”准则：12 位强密码+管理器、四步识破钓鱼、人走锁屏+加密存储、社交云盘“零分享”，并配套“断-报-改”黄金应急法，帮助员工把安全从“负担”变习惯，让每人成为企业最可靠的“人肉防火墙”。

NASA 宇航员的离异妻子承认撒谎

Solidot
11 months 3 weeks ago
2019 年 NASA 宇航员 Anne McClain 被控盗窃身份访问了离异妻子 Summer Worden 的银行账号，但在 2020 年 Worden 被控对联邦调查机构做出虚假陈述。现年 50 岁的 Worden 女士本周认罪，她目前保释中，将于 2 月 12 日接受判决，可能面临最高五年监禁。Worden 是前美国空军情报官，于 2014 年与 McClain 女士结婚，2018 年申请离婚，2019 年她投诉当时还在国际空间站的 McClain 盗取其身份从太空访问了银行账号。McClain 承认有此事但否认了任何犯罪行为。她通过律师称，访问银行账号只是为了确保家庭的财务状况良好，有足够的钱支付账单和照顾好 Worden 女士的儿子——为体外受精代孕，两人正争夺其抚养权。McClain 称，银行账号是两人公用的，一直使用相同的密码，她从未被告知停止使用该账号。McClain 于 2018 年 12 月至 2019 年 6 月期间在国际空间站执行任务，今年 3 月担任 SpaceX Crew-10 载人任务指挥官驻扎国际空间站至 8 月。

Qilin

Dark Feed IO
11 months 3 weeks ago

You must login to view this content

cohenido

Managed ad