Aggregator

Проект уходит в архив после серии опасных уязвимостей.

A vulnerability classified as critical was found in SourceCodester Online Magazine Management System 1.0. This affects an unknown part of the file /view_magazine.php. The manipulation of the argument ID results in sql injection. This vulnerability was named CVE-2025-13264. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability classified as critical has been found in SourceCodester Online Magazine Management System 1.0. Affected by this issue is some unknown functionality of the file /categories.php. The manipulation of the argument c leads to sql injection. This vulnerability is uniquely identified as CVE-2025-13263. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability described as critical has been identified in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFileRequestHandler of the file platform/web-client/src/main/java/lsfusion/http/controller/file/UploadFileRequestHandler.java. Executing manipulation of the argument sid can lead to path traversal. This vulnerability is handled as CVE-2025-13262. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability marked as problematic has been reported in lsfusion platform up to 6.1. Affected is the function DownloadFileRequestHandler of the file web-client/src/main/java/lsfusion/http/controller/file/DownloadFileRequestHandler.java. Performing manipulation of the argument Version results in path traversal. This vulnerability is known as CVE-2025-13261. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Submit #689424 / VDB-332599

Submit #689416 / VDB-332598

Submit #689415 / VDB-188311

关键词黑客科技媒体 bleepingcomputer 昨日（11 月 15 日）发布博文，报道称近期有黑客滥用

A vulnerability labeled as critical has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /manufacturer/edit_product.php. Such manipulation of the argument cmbProductUnit leads to sql injection. This vulnerability is traded as CVE-2025-13260. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #689414 / VDB-332597

Submit #689412 / VDB-332596

Explore how attackers operate after initial access, where defenses fail, and proven strategies to strengthen detection, response, and resilience.

The post Building Resilience: Lessons Learned from the Frontlines appeared first on Sygnia.

A vulnerability identified as critical has been detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation of the argument ID causes sql injection. This vulnerability appears as CVE-2025-13259. The attack may be initiated remotely. In addition, an exploit is available.

Submit #689268 / VDB-332595

Submit #689269 / VDB-272378

A vulnerability categorized as critical has been discovered in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto results in buffer overflow. This vulnerability is reported as CVE-2025-13258. The attack can be launched remotely. Moreover, an exploit is present.

Submit #688828 / VDB-332567