Aggregator

Submit #689412 / VDB-332596

Explore how attackers operate after initial access, where defenses fail, and proven strategies to strengthen detection, response, and resilience.

The post Building Resilience: Lessons Learned from the Frontlines appeared first on Sygnia.

A vulnerability identified as critical has been detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit_unit.php. This manipulation of the argument ID causes sql injection. This vulnerability appears as CVE-2025-13259. The attack may be initiated remotely. In addition, an exploit is available.

Submit #689268 / VDB-332595

Submit #689269 / VDB-272378

A vulnerability categorized as critical has been discovered in Tenda AC20 up to 16.03.08.12. The impacted element is an unknown function of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto results in buffer overflow. This vulnerability is reported as CVE-2025-13258. The attack can be launched remotely. Moreover, an exploit is present.

Submit #688828 / VDB-332567

Submit #688780 / VDB-332594

Submit #688781 / VDB-250914

A vulnerability was found in itsourcecode Inventory Management System 1.0. It has been rated as critical. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. This vulnerability is documented as CVE-2025-13257. The attack can be initiated remotely. Additionally, an exploit exists.

Submit #688716 / VDB-332593

A vulnerability was found in projectworlds Advanced Library Management System 1.0. It has been declared as critical. Impacted is an unknown function of the file /borrow.php. Executing manipulation of the argument roll_number can lead to sql injection. This vulnerability is registered as CVE-2025-13256. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in projectworlds Advanced Library Management System 1.0. It has been classified as critical. This issue affects some unknown processing of the file /book_search.php. Performing manipulation of the argument book_pub/book_title results in sql injection. This vulnerability is cataloged as CVE-2025-13255. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in projectworlds Advanced Library Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add_member.php. Such manipulation of the argument roll_number leads to sql injection. This vulnerability is listed as CVE-2025-13254. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability has been found in projectworlds Advanced Library Management System 1.0 and classified as critical. This affects an unknown part of the file /add_librarian.php. This manipulation of the argument Username causes sql injection. This vulnerability is tracked as CVE-2025-13253. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Submit #687863 / VDB-332592

Submit #687856 / VDB-332591

Submit #687857 / VDB-332590

Submit #687855 / VDB-332590

Submit #687854 / VDB-332589