Aggregator

CVE-2025-51867 | Deepfiction AI up to 20250603 Credit /browse/stories resource injection

VulDB Recent Entries
1 week 4 days ago
A vulnerability, which was classified as problematic, was found in Deepfiction AI up to 20250603. This affects an unknown part of the file /browse/stories of the component Credit Handler. The manipulation leads to improper control of resource identifiers. This vulnerability is uniquely identified as CVE-2025-51867. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-51865 | Ai2 Playground Web Service LLM Chat up to 2025-06-03 Object Reference thread resource injection (EUVD-2025-22315)

VulDB Recent Entries
1 week 4 days ago
A vulnerability classified as problematic was found in Ai2 Playground Web Service LLM Chat up to 2025-06-03. Affected by this vulnerability is an unknown functionality of the component Object Reference Handler. The manipulation of the argument thread leads to improper control of resource identifiers. This vulnerability is known as CVE-2025-51865. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2025-34140 | ETQ Reliance CG/Reliance NXG prior 2025.1.2/SE.2025.1 API Endpoint authorization

VulDB Recent Entries
1 week 4 days ago
A vulnerability classified as problematic has been found in ETQ Reliance CG and Reliance NXG. Affected is an unknown function of the component API Endpoint. The manipulation leads to authorization bypass. This vulnerability is traded as CVE-2025-34140. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-34143 | ETQ Reliance CG prior MP-4583 Username authentication bypass

VulDB Recent Entries
1 week 4 days ago
A vulnerability was found in ETQ Reliance CG. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument Username leads to authentication bypass using alternate channel. The identification of this vulnerability is CVE-2025-34143. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Threat Actors Allegedly Selling macOS 0-day LPE Exploit on Hacker Forums

Cyber Security News
1 week 4 days ago

A threat actor known as “skart7” is allegedly offering a zero-day Local Privilege Escalation (LPE) exploit targeting Apple’s macOS operating system for sale on a prominent hacker forum.  This development represents a significant security concern for macOS users, particularly those in enterprise environments and high-value target organizations. Key Takeaways1. Threat actor "skart7" allegedly selling macOS […]

The post Threat Actors Allegedly Selling macOS 0-day LPE Exploit on Hacker Forums appeared first on Cyber Security News.

Guru Baran

Iran’s Cyber Actors Attacking Global Airlines to Exfiltrate Sensitive Data

Cyber Security News
1 week 4 days ago

The breach of Tehran-based security contractor Amnban has ripped the cover off a multi-year espionage program that quietly burrowed into airline reservation systems across Africa, Europe, and the Middle East. Internal documents and screen-captured videos obtained by investigatory journalist Nariman Gharib reveal methodical reconnaissance of Royal Jordanian, Turkish Airlines, Wizz Air, Qatar Airways and more, […]

The post Iran’s Cyber Actors Attacking Global Airlines to Exfiltrate Sensitive Data appeared first on Cyber Security News.

Tushar Subhra Dutta

Managed ad