Submit #611505: Tenda FH451 v1.0.0.9 Stack-based Buffer Overflow [Accepted]
Submit #611505 / VDB-316189
Aggregator
Submit #611504: Tenda FH451 V1.0.0.9 Stack-based Buffer Overflow [Accepted]
1 week ago
Submit #611504 / VDB-316188
zezhifu
TeamXXX
1 week ago
You must login to view this content
cohenido
Everest
1 week ago
You must login to view this content
cohenido
Submit #611437: Tenda FH451 v1.0.0.9 Stack-based Buffer Overflow [Duplicate]
1 week ago
Submit #611437 / VDB-316004
zezhifu
CVE-2025-30403 | Facebook mvfst prior 2025.07.07.00 QUIC Session heap-based overflow
1 week ago
A vulnerability was found in Facebook mvfst. It has been rated as critical. This issue affects some unknown processing of the component QUIC Session Handler. The manipulation leads to heap-based buffer overflow.
The identification of this vulnerability is CVE-2025-30403. The attack needs to be initiated within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
Submit #610581: PHPGurukul Vehicle Parking Management System 1.13 SQL Injection [Duplicate]
1 week ago
Submit #610581 / VDB-316133
CVE-2025-3631 | IBM MQ/MQ Appliance up to 9.3.5.1 CD/9.4.0.11 LTS/9.4.2.1 CD use after free
1 week ago
A vulnerability was found in IBM MQ and MQ Appliance up to 9.3.5.1 CD/9.4.0.11 LTS/9.4.2.1 CD. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to use after free.
This vulnerability was named CVE-2025-3631. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-7503 | Shenzhen Liandian Communication V380 IP Camera/AppFHE1 1.0.6.0 Telnet Service hard-coded credentials
1 week ago
A vulnerability was found in Shenzhen Liandian Communication V380 IP Camera and AppFHE1 1.0.6.0. It has been classified as critical. This affects an unknown part of the component Telnet Service. The manipulation leads to hard-coded credentials.
This vulnerability is uniquely identified as CVE-2025-7503. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
'123456' password exposed chats for 64 million McDonald’s job chatbot applications
1 week ago
Cybersecurity researchers discovered a vulnerability in McHire, McDonald's chatbot job application platform, that exposed the chats of more than 64 million job applications across the United States. [...]
Lawrence Abrams
'123456' password exposed chats for 64 million McDonald’s job applicants
1 week ago
Cybersecurity researchers discovered a vulnerability in McHire, McDonald's chatbot job application platform, that exposed the chats of more than 64 million job applicants across the United States. [...]
Lawrence Abrams
Pay2Key Ransomware Gang Resurfaces With Incentives to Attack US, Israel
1 week ago
The ransomware-as-a-service (RaaS) operation, which has been tied to an Iranian advanced persistent threat (APT) group, recently boosted its affiliate profit share to 80% for attacks on Western targets.
Rob Wright
Watchguard Analysis Surfaces Major Spike in Malware Detections
1 week ago
An analysis of cyberattacks shared this week by Watchguard Technologies finds there was a 171% increase in total unique network malware detections and a 712% increase in endpoint detections in the first quarter of 2025 compared with the previous quarter. At the same time, the number of ransomware attacks declined 85% from the previous quarter,..
The post Watchguard Analysis Surfaces Major Spike in Malware Detections appeared first on Security Boulevard.
Michael Vizard
Лазерный интернет достиг межпланетного зонда. Европа впервые прорвала светом 265 миллионов км
1 week ago
Европа установила оптическую связь с аппаратом NASA Psyche в глубоком космосе.
CVE-2025-20242 | Cisco Unified Contact Center Enterprise Cloud Connect access control (cisco-sa-contcent-insuffacces-ArDOVhN8 / EUVD-2025-16047)
1 week ago
A vulnerability has been found in Cisco Unified Contact Center Enterprise and classified as critical. Affected by this vulnerability is an unknown functionality of the component Cloud Connect. The manipulation leads to improper access controls.
This vulnerability is known as CVE-2025-20242. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-44998 | TinyFileManager 2.4.7 /tinyfilemanager.php cross site scripting
1 week ago
A vulnerability has been found in TinyFileManager 2.4.7 and classified as problematic. This vulnerability affects unknown code of the file /tinyfilemanager.php. The manipulation leads to cross site scripting.
This vulnerability was named CVE-2025-44998. The attack can be initiated remotely. There is no exploit available.
vuldb.com
CVE-2025-4603 | Store Manager for WooCommerce Plugin up to 1.2.5 on WordPress wp-config.php delete_file default password
1 week ago
A vulnerability was found in Store Manager for WooCommerce Plugin up to 1.2.5 on WordPress. It has been declared as critical. This vulnerability affects the function delete_file of the file wp-config.php. The manipulation leads to use of default password.
This vulnerability was named CVE-2025-4603. The attack can be initiated remotely. There is no exploit available.
vuldb.com
CVE-2025-4336 | Store Manager for WooCommerce Plugin up to 1.2.5 on WordPress set_file unrestricted upload
1 week ago
A vulnerability was found in Store Manager for WooCommerce Plugin up to 1.2.5 on WordPress. It has been rated as critical. This issue affects the function set_file. The manipulation leads to unrestricted upload.
The identification of this vulnerability is CVE-2025-4336. The attack may be initiated remotely. There is no exploit available.
vuldb.com
CVE-2025-5058 | Store Manager for WooCommerce Plugin up to 1.2.5 on WordPress set_image unrestricted upload
1 week ago
A vulnerability classified as critical has been found in Store Manager for WooCommerce Plugin up to 1.2.5 on WordPress. Affected is the function set_image. The manipulation leads to unrestricted upload.
This vulnerability is traded as CVE-2025-5058. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com
CVE-2025-4602 | Store Manager for WooCommerce Plugin up to 1.2.5 on WordPress get_file path traversal
1 week ago
A vulnerability, which was classified as critical, has been found in Store Manager for WooCommerce Plugin up to 1.2.5 on WordPress. Affected by this issue is the function get_file. The manipulation leads to path traversal.
This vulnerability is handled as CVE-2025-4602. The attack may be launched remotely. There is no exploit available.
vuldb.com