Aggregator

Threat Actor Mimo Targets Magento and Docker to Deploy Crypto Miners and Proxyware

The Hackers News
9 months ago
The threat actor behind the exploitation of vulnerable Craft Content Management System (CMS) instances has shifted its tactics to target Magento CMS and misconfigured Docker instances. The activity has been attributed to a threat actor tracked as Mimo (aka Hezb), which has a long history of leveraging N-day security flaws in various web applications to deploy cryptocurrency miners. "Although
The Hacker News

How Businesses Prevent Credential Theft with Early Phishing Detection

Cyber Security News
9 months ago

Phishing attacks are evolving rapidly, allowing cybercriminals to bypass traditional security systems like email filters and static defenses. As a result, many businesses are left vulnerable to credential theft, often without realizing the threat until it’s too late. Early detection is key, and real-time analysis of suspicious emails, links, and files in a secure environment offers the solution. Let’s explore […]

The post How Businesses Prevent Credential Theft with Early Phishing Detection appeared first on Cyber Security News.

Balaji N

CVE-2024-22653 | yasm 9defefae section.c yasm_section_bcs_append null pointer dereference (Nessus ID 242594)

Vuldb Updates
9 months ago
A vulnerability, which was classified as problematic, has been found in yasm 9defefae. Affected by this issue is the function yasm_section_bcs_append of the file section.c. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2024-22653. The attack needs to be approached within the local network. There is no exploit available.
vuldb.com

CVE-2025-46001 | Filemanager 2.3.0 PHP File is_allowed_file_type unrestricted upload (Exploit 38895 / EUVD-2025-21880)

Vuldb Updates
9 months ago
A vulnerability, which was classified as critical, was found in Filemanager 2.3.0. Affected is the function is_allowed_file_type of the component PHP File Handler. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2025-46001. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-7242 | CADImage Plugin on IrfanView DWG File Parser out-of-bounds (EUVD-2025-22245)

Vuldb Updates
9 months ago
A vulnerability classified as critical has been found in CADImage Plugin on IrfanView. This affects an unknown part of the component DWG File Parser. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2025-7242. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-7243 | CADImage Plugin on IrfanView DWG File Parser memory corruption (EUVD-2025-22244)

Vuldb Updates
9 months ago
A vulnerability classified as critical was found in CADImage Plugin on IrfanView. This vulnerability affects unknown code of the component DWG File Parser. The manipulation leads to memory corruption. This vulnerability was named CVE-2025-7243. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-7261 | CADImage Plugin on IrfanView DWG File Parser out-of-bounds (EUVD-2025-22226)

Vuldb Updates
9 months ago
A vulnerability was found in CADImage Plugin on IrfanView. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component DWG File Parser. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2025-7261. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-42947 | SAP FICA ODN framework up to SAPSCORE 132 inject code injection (EUVD-2025-22407)

Vuldb Updates
9 months ago
A vulnerability, which was classified as critical, was found in SAP FICA ODN framework up to SAPSCORE 132. Affected is an unknown function. The manipulation of the argument inject leads to code injection. This vulnerability is traded as CVE-2025-42947. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

Managed ad