Aggregator

Submit #645702 / VDB-323092

A vulnerability described as critical has been identified in ruisibi rsbi-os 4.7. This impacts an unknown function of the file /rsbi/model/testDataSource.action of the component sqlite-jdbc. Such manipulation leads to privilege escalation. This vulnerability is referenced as CVE-2025-57141. It is possible to launch the attack remotely. No exploit is available.

过量饮酒损害肝脏已非秘密。根据发表在《自然》期刊上的一项研究，长期饮酒还会帮助肠道细菌更容易攻击肝脏。加州圣迭戈的研究人员分析了人类肝组织活检样本和酒精相关肝病的小鼠模型，发现长期饮酒会损害小肠中名为 mAChR4 的细胞信号传导蛋白的产生，而低水平的 mAChR4 会干扰名为 goblet cell-associated antigen passages(GAPs)通道的形成，GAP 通道对引导免疫系统对微生物——尤其是从肠道逃逸到人体其它器官的微生物——做出响应上起到重要作用。研究人员发现，如果恢复 mAChR4 的功能，GAP 通道会再次形成，有助于修复免疫系统对肠道细菌的反应，从而能减轻对肝脏的损害。

Wealthsimple confirmed a third-party vendor data breach affecting roughly 30,000 customers

A vulnerability marked as critical has been reported in uverif up to 3.2. This affects the function addbatch of the file /admin/kami_list. This manipulation of the argument note causes sql injection. The identification of this vulnerability is CVE-2025-10121. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability labeled as critical has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. This vulnerability was named CVE-2025-10120. The attack may be performed from remote. In addition, an exploit is available.

Submit #645685 / VDB-323090

Meer dan 400.000 belangstellenden kwamen afgelopen weekend en vrijdag af op de Wereldhavendagen in Rotterdam. Met 6 schepen aan de kade was de Koninklijke Marine ruim vertegenwoordigd. Iedere dag waren er 3 sensationele shows op het water.

Submit #645680 / VDB-323089

A vulnerability identified as critical has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. This vulnerability is uniquely identified as CVE-2025-10118. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability identified as critical has been detected in Campcodes Online Water Billing System 1.0. Affected by this issue is some unknown functionality of the file /process.php. The manipulation of the argument Username leads to sql injection. This vulnerability is uniquely identified as CVE-2025-9739. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability was found in Campcodes Online Feeds Product Inventory System 1.0. It has been classified as critical. This vulnerability affects unknown code of the file /feeds/index.php of the component Login. The manipulation of the argument Username leads to sql injection. This vulnerability is documented as CVE-2025-9761. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in Campcodes Online Learning Management System 1.0. It has been declared as critical. This issue affects some unknown processing of the file /student_signup.php. The manipulation of the argument Username results in sql injection. This vulnerability is reported as CVE-2025-9763. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in itsourcecode Sports Management System 1.0. It has been rated as critical. Impacted is an unknown function of the file /Admin/resultdetails.php. This manipulation of the argument ID causes sql injection. This vulnerability appears as CVE-2025-9764. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability categorized as critical has been discovered in itsourcecode Sports Management System 1.0. The affected element is an unknown function of the file /Admin/tournament_details.php. Such manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2025-9765. The attack may be launched remotely. Furthermore, there is an exploit available.