Aggregator

Ransomware Attack Update for the 29th of July 2025

Minnesota Gov. Tim Walz activated the state national guard to help respond to an ongoing cyberattack on the state's capital city.

The post Minnesota governor activates National Guard amid St. Paul cyberattack appeared first on CyberScoop.

Rekono combines other hacking tools and its results to execute complete pentesting processes against a target in an automated way. The findings obtained during the executions will be sent to the user via email...

The post rekono: Execute complete pentesting processes appeared first on Penetration Testing Tools.

Mayor Melvin Carter said during a press conference on Tuesday that the city is most concerned about the data it holds on government employees, arguing that the city does not carry much information on city residents.

Currently trending CVE - Hype Score: 8 - In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race huge_pmd_unshare() drops a reference on a page table that may have previously been shared across processes, potentially turning it into a normal page table ...

A vulnerability has been found in Smart Slider Plugin up to 3.5.1.28 on WordPress and classified as critical. This vulnerability affects unknown code. The manipulation of the argument sliderid leads to sql injection. This vulnerability was named CVE-2025-6348. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Bacula-web up to 9.7.0. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2025-45346. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Couchbase Sync Gateway up to 3.2.5. Affected by this issue is some unknown functionality of the file sgcollect_info_options.log. The manipulation leads to missing encryption of sensitive data. This vulnerability is handled as CVE-2025-52490. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in NanoMQ 0.21.10. Affected by this vulnerability is an unknown functionality of the component MQTT Wildcard Handler. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-42655. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability classified as critical has been found in Discourse up to 3.4.6/3.5.0.beta.7. Affected is an unknown function. The manipulation leads to session fixiation. This vulnerability is traded as CVE-2025-53102. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Enalean Tuleap Community Edition and Tuleap Enterprise Edition. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-53541. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Enalean Tuleap Community Edition and Tuleap Enterprise Edition. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to incorrect authorization. This vulnerability was named CVE-2025-53902. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Enalean Tuleap Community Edition and Tuleap Enterprise Edition. It has been classified as problematic. This affects an unknown part of the component Forgot Password Handler. The manipulation leads to observable response discrepancy. This vulnerability is uniquely identified as CVE-2025-52899. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in NanoMQ 0.17.9 and classified as critical. Affected by this issue is the function sub_Ctx_handle of the component SUBSCRIBE Message Handler. The manipulation leads to use after free. This vulnerability is handled as CVE-2024-42651. The attack can only be done within the local network. There is no exploit available.

A vulnerability has been found in Piwigo up to 13.8.0 and classified as critical. Affected by this vulnerability is the function ws_user_gerList of the file include\ws_functions\pwg.users.php. The manipulation of the argument max_level/min_register leads to sql injection. This vulnerability is known as CVE-2024-43018. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System 1.0. Affected is an unknown function of the file /admin/password-recovery.php. The manipulation of the argument Username leads to sql injection. This vulnerability is traded as CVE-2025-51045. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file /new-user-testing.php. The manipulation of the argument govtissuedid leads to sql injection. The identification of this vulnerability is CVE-2025-51044. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic was found in IBM DB2 12.1.0/12.1.1/12.1.2 on Linux. This vulnerability affects unknown code of the component Query Handler. The manipulation leads to improper neutralization of special elements in data query logic. This vulnerability was named CVE-2025-33114. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in IBM DB2 and DB2 Connect Server up to 11.5.9/12.1.2. This affects an unknown part of the component Db2fm. The manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2025-33092. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in IBM DB2 and DB2 Connect Server up to 10.5.0.11/11.1.4.7/11.5.9/12.1.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Query Handler. The manipulation leads to stack-based buffer overflow. This vulnerability is handled as CVE-2024-52894. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.