Aggregator

CVE-2025-6054 | YANewsflash Plugin up to 1.0.3 on WordPress Setting yanewsflash.php cross-site request forgery

VulDB Recent Entries
1 week 4 days ago
A vulnerability classified as problematic was found in YANewsflash Plugin up to 1.0.3 on WordPress. Affected by this vulnerability is an unknown functionality of the file yanewsflash/yanewsflash.php of the component Setting Handler. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2025-6054. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-4294 | HotelRunner B2B up to 03.06.2025 cross site scripting

VulDB Recent Entries
1 week 4 days ago
A vulnerability was found in HotelRunner B2B up to 03.06.2025. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-4294. The attack may be launched remotely. There is no exploit available. This product is a managed service. It is not possible for users to maintain vulnerability countermeasures themselves.
vuldb.com

CVE-2025-4295 | HotelRunner B2B up to 03.06.2025 Host certificate validation

VulDB Recent Entries
1 week 4 days ago
A vulnerability was found in HotelRunner B2B up to 03.06.2025. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Host leads to certificate with host mismatch. This vulnerability is known as CVE-2025-4295. The attack can be launched remotely. There is no exploit available. This product is available as a managed service. Users are not able to maintain vulnerability countermeasures themselves.
vuldb.com

Threat Actors Target Linux SSH Servers to Deploy SVF Botnet

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 week 4 days ago

AhnLab Security Intelligence Center (ASEC) has been actively tracking cyber threats exploiting vulnerable Linux servers through strategically deployed honeypots, with SSH services using weak credentials emerging as a prime target for distributed denial-of-service (DDoS) and cryptocurrency mining actors. In a recent incident, ASEC observed threat actors successfully infiltrating a honeypot Linux server via brute-force attacks […]

The post Threat Actors Target Linux SSH Servers to Deploy SVF Botnet appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

CVE-2025-34141 | ETQ Reliance CG 2025.1.2/MP-4583 SQLConverterServlet cross site scripting

VulDB Recent Entries
1 week 4 days ago
A vulnerability was found in ETQ Reliance CG 2025.1.2/MP-4583. It has been classified as problematic. Affected is an unknown function of the component SQLConverterServlet. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-34141. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-34142 | ETQ Reliance CG prior 2025.1.2/SE.2025.1 SAML Authentication /resources/sessions/sso xml external entity reference

VulDB Recent Entries
1 week 4 days ago
A vulnerability was found in ETQ Reliance CG and classified as problematic. This issue affects some unknown processing of the file /resources/sessions/sso of the component SAML Authentication. The manipulation leads to xml external entity reference. The identification of this vulnerability is CVE-2025-34142. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2015-10140 | Darren Cooney Ajax Load More Plugin prior 2.8.1.2 on WordPress authorization

VulDB Recent Entries
1 week 4 days ago
A vulnerability has been found in Darren Cooney Ajax Load More Plugin on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to missing authorization. This vulnerability was named CVE-2015-10140. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad