Aggregator

CVE-2025-11351 | code-projects Online Hotel Reservation System 1.0 /admin/editpicexec.php image unrestricted upload

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability classified as critical has been found in code-projects Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/editpicexec.php. This manipulation of the argument image causes unrestricted upload. This vulnerability is registered as CVE-2025-11351. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
vuldb.com

CVE-2025-11350 | Campcodes Online Apartment Visitor Management System 1.0 bwdates-reports-details.php fromdate/todate sql injection

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability described as critical has been identified in Campcodes Online Apartment Visitor Management System 1.0. The affected element is an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate results in sql injection. This vulnerability is cataloged as CVE-2025-11350. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-11349 | Campcodes Online Apartment Visitor Management System 1.0 /search-visitor.php searchdata sql injection

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability marked as critical has been reported in Campcodes Online Apartment Visitor Management System 1.0. Impacted is an unknown function of the file /search-visitor.php. The manipulation of the argument searchdata leads to sql injection. This vulnerability is listed as CVE-2025-11349. The attack may be initiated remotely. In addition, an exploit is available.
vuldb.com

CVE-2025-11348 | Campcodes Online Apartment Visitor Management System 1.0 /index.php Username sql injection

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability labeled as critical has been found in Campcodes Online Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. This vulnerability is tracked as CVE-2025-11348. The attack can be launched remotely. Moreover, an exploit is present.
vuldb.com

CVE-2025-11347 | code-projects Student Crud Operation up to 3.3 Add Student Page/Edit Student Page add.php move_uploaded_file unrestricted upload

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability identified as critical has been detected in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function move_uploaded_file of the file add.php of the component Add Student Page/Edit Student Page. Performing manipulation results in unrestricted upload. This vulnerability is identified as CVE-2025-11347. The attack can be initiated remotely. Additionally, an exploit exists.
vuldb.com

Weekly Update 472

Troy Hunt
8 months 2 weeks ago

This probably comes through pretty strongly in this week's video, but I love the vibe at CERN. It's a place so focused on the common good of science that all the other cultural attributes that often put people at odds these days fade into the distance.

Troy Hunt

Weekly Update 472

不安全
8 months 2 weeks ago
文章描述了作者对CERN科学氛围的赞赏，并提到CERN成为第41个加入HIBP服务的政府机构。此外，还介绍了最近的数据泄露事件，包括Pilot Jobs和HomeRefill的安全漏洞。

CVE-2025-11346 | ILIAS up to 8.23/9.13/10.1 Base64 Decoding unserialize f_settings deserialization (SEC-2025-2113)

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability categorized as critical has been discovered in ILIAS up to 8.23/9.13/10.1. This affects the function unserialize of the component Base64 Decoding Handler. Such manipulation of the argument f_settings leads to deserialization. This vulnerability is referenced as CVE-2025-11346. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-11345 | ILIAS up to 8.23/9.13/10.1 Test Import unserialize deserialization

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability was found in ILIAS up to 8.23/9.13/10.1. It has been rated as problematic. Affected by this issue is the function unserialize of the component Test Import. This manipulation causes deserialization. The identification of this vulnerability is CVE-2025-11345. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-11344 | ILIAS up to 8.23/9.13/10.1 Certificate Import Remote Code Execution

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability was found in ILIAS up to 8.23/9.13/10.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Certificate Import Handler. The manipulation results in Remote Code Execution. This vulnerability was named CVE-2025-11344. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

Asgard Malware Protector Reversed: Researchers Expose Its Antivirus Bypass Methods

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
8 months 2 weeks ago

SpyCloud Labs analysts have successfully reverse-engineered Asgard Protector, a sophisticated crypter tool prominently used to hide malicious payloads from antivirus detection systems. This crypter has gained particular notoriety for being the preferred choice among sellers of LummaC2, currently the most prevalent commodity infostealer in the cyberthreat landscape. The analysis reveals intricate evasion techniques that demonstrate the evolving […]

The post Asgard Malware Protector Reversed: Researchers Expose Its Antivirus Bypass Methods appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

Managed ad