Aggregator

CVE-2025-4294 | HotelRunner B2B up to 03.06.2025 cross site scripting

VulDB Recent Entries
1 week 3 days ago
A vulnerability was found in HotelRunner B2B up to 03.06.2025. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-4294. The attack may be launched remotely. There is no exploit available. This product is a managed service. It is not possible for users to maintain vulnerability countermeasures themselves.
vuldb.com

CVE-2025-4295 | HotelRunner B2B up to 03.06.2025 Host certificate validation

VulDB Recent Entries
1 week 3 days ago
A vulnerability was found in HotelRunner B2B up to 03.06.2025. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Host leads to certificate with host mismatch. This vulnerability is known as CVE-2025-4295. The attack can be launched remotely. There is no exploit available. This product is available as a managed service. Users are not able to maintain vulnerability countermeasures themselves.
vuldb.com

Threat Actors Target Linux SSH Servers to Deploy SVF Botnet

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 week 3 days ago

AhnLab Security Intelligence Center (ASEC) has been actively tracking cyber threats exploiting vulnerable Linux servers through strategically deployed honeypots, with SSH services using weak credentials emerging as a prime target for distributed denial-of-service (DDoS) and cryptocurrency mining actors. In a recent incident, ASEC observed threat actors successfully infiltrating a honeypot Linux server via brute-force attacks […]

The post Threat Actors Target Linux SSH Servers to Deploy SVF Botnet appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

CVE-2025-34141 | ETQ Reliance CG 2025.1.2/MP-4583 SQLConverterServlet cross site scripting

VulDB Recent Entries
1 week 3 days ago
A vulnerability was found in ETQ Reliance CG 2025.1.2/MP-4583. It has been classified as problematic. Affected is an unknown function of the component SQLConverterServlet. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-34141. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-34142 | ETQ Reliance CG prior 2025.1.2/SE.2025.1 SAML Authentication /resources/sessions/sso xml external entity reference

VulDB Recent Entries
1 week 3 days ago
A vulnerability was found in ETQ Reliance CG and classified as problematic. This issue affects some unknown processing of the file /resources/sessions/sso of the component SAML Authentication. The manipulation leads to xml external entity reference. The identification of this vulnerability is CVE-2025-34142. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2015-10140 | Darren Cooney Ajax Load More Plugin prior 2.8.1.2 on WordPress authorization

VulDB Recent Entries
1 week 3 days ago
A vulnerability has been found in Darren Cooney Ajax Load More Plugin on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to missing authorization. This vulnerability was named CVE-2015-10140. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-51867 | Deepfiction AI up to 20250603 Credit /browse/stories resource injection

VulDB Recent Entries
1 week 3 days ago
A vulnerability, which was classified as problematic, was found in Deepfiction AI up to 20250603. This affects an unknown part of the file /browse/stories of the component Credit Handler. The manipulation leads to improper control of resource identifiers. This vulnerability is uniquely identified as CVE-2025-51867. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-51865 | Ai2 Playground Web Service LLM Chat up to 2025-06-03 Object Reference thread resource injection (EUVD-2025-22315)

VulDB Recent Entries
1 week 3 days ago
A vulnerability classified as problematic was found in Ai2 Playground Web Service LLM Chat up to 2025-06-03. Affected by this vulnerability is an unknown functionality of the component Object Reference Handler. The manipulation of the argument thread leads to improper control of resource identifiers. This vulnerability is known as CVE-2025-51865. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-34140 | ETQ Reliance CG/Reliance NXG prior 2025.1.2/SE.2025.1 API Endpoint authorization

VulDB Recent Entries
1 week 3 days ago
A vulnerability classified as problematic has been found in ETQ Reliance CG and Reliance NXG. Affected is an unknown function of the component API Endpoint. The manipulation leads to authorization bypass. This vulnerability is traded as CVE-2025-34140. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-34143 | ETQ Reliance CG prior MP-4583 Username authentication bypass

VulDB Recent Entries
1 week 3 days ago
A vulnerability was found in ETQ Reliance CG. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument Username leads to authentication bypass using alternate channel. The identification of this vulnerability is CVE-2025-34143. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Threat Actors Allegedly Selling macOS 0-day LPE Exploit on Hacker Forums

Cyber Security News
1 week 3 days ago

A threat actor known as “skart7” is allegedly offering a zero-day Local Privilege Escalation (LPE) exploit targeting Apple’s macOS operating system for sale on a prominent hacker forum.  This development represents a significant security concern for macOS users, particularly those in enterprise environments and high-value target organizations. Key Takeaways1. Threat actor "skart7" allegedly selling macOS […]

The post Threat Actors Allegedly Selling macOS 0-day LPE Exploit on Hacker Forums appeared first on Cyber Security News.

Guru Baran

Managed ad