Aggregator

CVE-2025-8223 | jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999 AdminTypeCustController.java cross-site request forgery (EUVD-2025-22811)

VulDB Recent Entries
1 week 5 days ago
A vulnerability, which was classified as problematic, was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. This affects an unknown part of the file AdminTypeCustController.java. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2025-8223. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
vuldb.com

CVE-2025-8222 | jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999 GoodsController.java cross site scripting (EUVD-2025-22812)

VulDB Recent Entries
1 week 5 days ago
A vulnerability, which was classified as problematic, has been found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. Affected by this issue is some unknown functionality of the file GoodsController.java. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-8222. The attack may be launched remotely. Furthermore, there is an exploit available. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. Multiple endpoints are affected.
vuldb.com

CVE-2025-8221 | jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999 GoodsCustController.java goodsSearch keyword cross site scripting (EUVD-2025-22810)

VulDB Recent Entries
1 week 5 days ago
A vulnerability classified as problematic was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. Affected by this vulnerability is the function goodsSearch of the file GoodsCustController.java. The manipulation of the argument keyword leads to cross site scripting. This vulnerability is known as CVE-2025-8221. The attack can be launched remotely. Furthermore, there is an exploit available. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
vuldb.com

Arizona woman sentenced for aiding North Korea in U.S. IT job fraud scheme

Security Affairs
1 week 5 days ago
Arizona woman gets 8 years for helping North Korea-linked threat actors to infiltrate 309 U.S. firms with fake IT jobs. Christina Marie Chapman (50) from Arizona, was sentenced to 102 months in prison for aiding North Korean IT workers in infiltrating 309 U.S. companies. She pleaded guilty to charges including aggravated identity theft, conspiracy to […]
Pierluigi Paganini

cervantes: open-source collaborative platform for pentesters or red teams

Penetration Testing Tools - Metepreter.org
1 week 5 days ago

Cervantes is an open-source, collaborative platform designed specifically for pentesters and red teams. It serves as a comprehensive management tool, streamlining the organization of projects, clients, vulnerabilities, and reports in a single, centralized location....

The post cervantes: open-source collaborative platform for pentesters or red teams appeared first on Penetration Testing Tools.

ddos

Managed ad