Aggregator

第四期少数派共创开放日将于7月30日下午在深圳举办，内容包括会员新季启动介绍、嘉宾分享产品打造经验、项目分享及互动交流等。活动免费限20人报名需填问卷。

A vulnerability classified as problematic was found in jshERP up to 3.5. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/user/updatePwd. The manipulation leads to weak password recovery. This vulnerability is known as CVE-2025-7948. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in jshERP up to 3.5. Affected is an unknown function of the file /user/delete of the component Account Handler. The manipulation of the argument ID leads to improper authorization. This vulnerability is traded as CVE-2025-7947. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /search-visitor.php of the component HTTP POST Request Handler. The manipulation of the argument searchdata leads to cross site scripting. The identification of this vulnerability is CVE-2025-7946. The attack may be initiated remotely. Furthermore, there is an exploit available.

Submit #619277 / VDB-317089

Submit #619276 / VDB-317088

Meta以80亿美元和解隐私诉讼；超百万儿童及家庭信息被泄露；Meta AI漏洞可暴露隐私；Google修复Chrome六安全漏洞；前美军上校因泄密面临十年监禁。

A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the function formSetWanDhcpplus of the file /goform/formSetWanDhcpplus. The manipulation of the argument curTime leads to buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability was named CVE-2025-7945. The attack can be initiated remotely. There is no exploit available.

The way we manage certificates must transform. For CISOs, this is not a future problem; the time to re-architect digital trust is now.

The post The Expiring Trust Model: CISOs Must Rethink PKI in the Era of Short-Lived Certificates and Machine Identity  appeared first on Security Boulevard.

现代企业面临数字证书安全挑战：新规定缩短证书有效期至47天，需频繁更新和管理；机器身份增长导致复杂性增加；后量子计算威胁迫近。CISO需通过自动化、治理和量子安全技术应对风险。

Submit #619264 / VDB-317087

A vulnerability was found in PHPGurukul Taxi Stand Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /search.php. The manipulation of the argument searchdata leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-7944. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/search-autoortaxi.php. The manipulation of the argument searchdata leads to cross site scripting. This vulnerability is handled as CVE-2025-7943. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. This vulnerability is known as CVE-2025-7942. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #619227 / VDB-313345

Submit #619200 / VDB-317086

Submit #619179 / VDB-317085

Submit #619178 / VDB-317084

Submit #619169 / VDB-317083

A vulnerability, which was classified as problematic, was found in PHPGurukul Time Table Generator System 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument adminname leads to cross site scripting. This vulnerability is traded as CVE-2025-7941. It is possible to launch the attack remotely. Furthermore, there is an exploit available.