Aggregator

CVE-2025-8470 | SourceCodester Online Hotel Reservation System 1.0 /admin/deleteroom.php ID sql injection (EUVD-2025-23439)

VulDB Recent Entries
2 weeks 1 day ago
A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/deleteroom.php. The manipulation of the argument ID leads to sql injection. This vulnerability was named CVE-2025-8470. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-8469 | SourceCodester Online Hotel Reservation System 1.0 /admin/deletegallery.php ID sql injection (EUVD-2025-23438)

VulDB Recent Entries
2 weeks 1 day ago
A vulnerability classified as critical has been found in SourceCodester Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/deletegallery.php. The manipulation of the argument ID leads to sql injection. This vulnerability is uniquely identified as CVE-2025-8469. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

SafePay Ransomware Strikes 260+ Victims Across Multiple Countries

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
2 weeks 1 day ago

The SafePay ransomware organization has quickly become a powerful operator since its initial detection in September 2024, marking a startling increase in the cyber threat scenario. Unlike predominant ransomware-as-a-service (RaaS) models that rely on affiliates for dissemination and profit-sharing, SafePay operates autonomously, with its core developers directly orchestrating intrusions and extortion campaigns. This self-contained approach […]

The post SafePay Ransomware Strikes 260+ Victims Across Multiple Countries appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

CVE-2025-8468 | code-projects Wazifa System 1.0 /controllers/reset.php email sql injection (EUVD-2025-23437)

VulDB Recent Entries
2 weeks 1 day ago
A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. This vulnerability is handled as CVE-2025-8468. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-8467 | code-projects Wazifa System 1.0 regcontrol.php Username sql injection (EUVD-2025-23436)

VulDB Recent Entries
2 weeks 1 day ago
A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. This vulnerability is known as CVE-2025-8467. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-8466 | code-projects Online Farm System 1.0 /forgot_passfarmer.php email sql injection (EUVD-2025-23433)

VulDB Recent Entries
2 weeks 1 day ago
A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /forgot_passfarmer.php. The manipulation of the argument email leads to sql injection. This vulnerability is traded as CVE-2025-8466. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

Secret Blizzard Group’s ApolloShadow Malware Install Root Certificates on Devices to Trust Malicious Sites

Cyber Security News
2 weeks 1 day ago

A sophisticated cyberespionage campaign targeting foreign embassies in Moscow has been uncovered, revealing the deployment of a custom malware strain designed to manipulate digital trust mechanisms. The Russian state-sponsored threat group Secret Blizzard has been orchestrating an adversary-in-the-middle operation since at least 2024, utilizing their position within internet service provider infrastructure to deploy the ApolloShadow […]

The post Secret Blizzard Group’s ApolloShadow Malware Install Root Certificates on Devices to Trust Malicious Sites appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2025-8146 | Qi Addons for Elementor Plugin up to 1.9.2 on WordPress TypeOut Text Widget cross site scripting (EUVD-2025-23420)

VulDB Recent Entries
2 weeks 1 day ago
A vulnerability was found in Qi Addons for Elementor Plugin up to 1.9.2 on WordPress and classified as problematic. This issue affects some unknown processing of the component TypeOut Text Widget. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-8146. The attack may be initiated remotely. There is no exploit available.
vuldb.com

Managed ad