Aggregator

Driving a Security-by-Design Mindset Across Manufacturing

Ransomware DataBreachToday.com
9 months 3 weeks ago
Inogen's Ebenezer Arumai Discusses Cyber Risk in Advance of ManuSec Summit
Ahead of QG Media's 10th ManuSec Summit - scheduled Oct. 14-15 in Chicago - we caught up with Ebenezer Arumai, director of IT infrastructure and security at medical device manufacturer Inogen, to discuss the cyber risk challenges related to medical equipment.

Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories

Security Boulevard
9 months 3 weeks ago

Identity-based attacks are on the rise. Attacks in which malicious actors assume the identity of an entity to easily gain access to resources and sensitive data have been increasing in number and frequency over the last few years.

The post Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories appeared first on Security Boulevard.

Dwayne McDaniel

Sidewinder Hacker Group Weaponizing LNK File to Execute Malicious Scripts

Cyber Security News
9 months 3 weeks ago

The notorious APT-C-24 threat actor group, commonly known as Sidewinder or Rattlesnake, has evolved its attack methodology by deploying sophisticated LNK file-based phishing campaigns targeting government, energy, military, and mining sectors across South Asia. Active since 2012, this advanced persistent threat organization has shifted away from its traditional exploitation of Microsoft Office vulnerabilities, instead embracing […]

The post Sidewinder Hacker Group Weaponizing LNK File to Execute Malicious Scripts appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2025-9136 | libretro RetroArch 1.18.0/1.19.0/1.20.0 file_stream.c filestream_vscanf out-of-bounds (ID 17555 / EUVD-2025-25164)

Vuldb Updates
9 months 3 weeks ago
A vulnerability classified as problematic has been found in libretro RetroArch 1.18.0/1.19.0/1.20.0. This affects the function filestream_vscanf of the file libretro-common/streams/file_stream.c. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2025-9136. The attack needs to be launched locally. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-10233 | kalcaddle kodbox 1.61 editor.class.php fileGet/fileSave path path traversal (EUVD-2025-27620)

Vuldb Updates
9 months 3 weeks ago
A vulnerability has been found in kalcaddle kodbox 1.61 and classified as critical. This affects the function fileGet/fileSave of the file app/controller/explorer/editor.class.php. The manipulation of the argument path leads to path traversal. This vulnerability is documented as CVE-2025-10233. The attack can be initiated remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-40691 | PHPGurukul Online Fire Reporting System 1.2 bwdates-report-result.php todate sql injection

Vuldb Updates
9 months 3 weeks ago
A vulnerability identified as critical has been detected in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /ofrs/admin/bwdates-report-result.php. Performing manipulation of the argument todate results in sql injection. This vulnerability is cataloged as CVE-2025-40691. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-40687 | PHPGurukul Online Fire Reporting System 1.2 /admin/add-team.php mobilenumber/teamleadname/teammember sql injection

Vuldb Updates
9 months 3 weeks ago
A vulnerability labeled as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of the file /admin/add-team.php. Executing manipulation of the argument mobilenumber/teamleadname/teammember can lead to sql injection. This vulnerability is registered as CVE-2025-40687. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2025-40692 | PHPGurukul Online Fire Reporting System 1.2 /ofrs/details.php requestid sql injection

Vuldb Updates
9 months 3 weeks ago
A vulnerability marked as critical has been reported in PHPGurukul Online Fire Reporting System 1.2. Affected by this issue is some unknown functionality of the file /ofrs/details.php. The manipulation of the argument requestid leads to sql injection. This vulnerability is documented as CVE-2025-40692. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2025-40689 | PHPGurukul Online Fire Reporting System 1.2 request-details.php remark/status/requestid sql injection

Vuldb Updates
9 months 3 weeks ago
A vulnerability described as critical has been identified in PHPGurukul Online Fire Reporting System 1.2. This affects an unknown part of the file /ofrs/admin/request-details.php. The manipulation of the argument remark/status/requestid results in sql injection. This vulnerability is reported as CVE-2025-40689. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2025-40690 | PHPGurukul Online Fire Reporting System 1.2 edit-team.php teamid sql injection

Vuldb Updates
9 months 3 weeks ago
A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. This vulnerability affects unknown code of the file /ofrs/admin/edit-team.php. This manipulation of the argument teamid causes sql injection. This vulnerability appears as CVE-2025-40690. The attack may be initiated remotely. There is no available exploit.
vuldb.com

CVE-2025-40696 | PHPGurukul Online Fire Reporting System 1.2 /ofrs/reporting.php fullname/location/message cross site scripting

Vuldb Updates
9 months 3 weeks ago
A vulnerability classified as problematic was found in PHPGurukul Online Fire Reporting System 1.2. This issue affects some unknown processing of the file /ofrs/reporting.php. Such manipulation of the argument fullname/location/message leads to cross site scripting. This vulnerability is traded as CVE-2025-40696. The attack may be launched remotely. There is no exploit available.
vuldb.com

Managed ad