Aggregator

A vulnerability was found in EGavilanMedia User Registration and Login System with Admin Panel 1.0 and classified as problematic. The affected element is an unknown function of the component Manage User Tab. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2020-29230. The attack can be launched remotely. No exploit exists.

A vulnerability was found in EGavilanMedia User Registration and Login System with Admin Panel 1.0. It has been classified as problematic. The impacted element is an unknown function of the component Admin Profile Page. This manipulation causes cross site scripting. This vulnerability appears as CVE-2020-29231. The attack may be initiated remotely. There is no available exploit.

A vulnerability categorized as problematic has been discovered in Invision Community 4.5.4. Affected is an unknown function. Executing a manipulation of the argument Field Name can lead to cross site scripting. This vulnerability is handled as CVE-2020-29477. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability has been found in Beetel 777VR1 and classified as problematic. This affects an unknown part of the component NTP Server Name Handler. The manipulation of the argument Keyword leads to cross site scripting. This vulnerability is referenced as CVE-2020-25498. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as problematic has been discovered in Digisol DG-HR3400. The impacted element is an unknown function of the component NTP Server Name Handler. Executing a manipulation can lead to cross site scripting. This vulnerability is registered as CVE-2020-35262. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in VideoLAN VLC Media Player 3.0.11. It has been declared as critical. Impacted is the function EbmlTypeDispatcher::send of the component MKV File Handler. The manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2020-26664. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability marked as critical has been reported in K7computing K7AntiVirus Premium 15.1.0.53. Affected by this vulnerability is an unknown functionality in the library K7Sentry.sys. This manipulation causes improper access controls. This vulnerability appears as CVE-2018-8044. The attack requires local access. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in K7computing K7AntiVirus Premium 15.1.0.53. Affected by this issue is some unknown functionality of the file K7TSMngr.exe. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2018-8724. An attack has to be approached locally. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability was found in zzcms ver201910. It has been rated as critical. Affected is an unknown function of the component Cookie Handler. The manipulation leads to sql injection. This vulnerability is listed as CVE-2020-23630. The attack may be initiated remotely. There is no available exploit.

Submit #850616 / VDB-376356

救援飞船发射升空 防NASA雨燕天文台坠落美国宇航局展开罕见的太空救援行动，一艘名为 “连结号（Link）”太空船于周五发射升空，其肩负的使命，就是去拯救一架即将失控坠落的NASA天文卫星雨燕天文台。

中国官方发布关于促进电影院多样化经营的通知，提出支持引入AI智能体、电玩游戏以卡拉OK等娱乐业态。这份由国家电影局、市场监管总局印发的通知称，此举的目的是要打破传统经营模式，将电影院打造成为集观影、社

政府官员周五透露，印度技术部长Ashwini Vaishnaw已要求其团队就Instagram平台上涉及儿童的色情内容问题，传唤Meta平台公司。下达这一指令的当天，Meta团队正与技术部官员会面，以

И каждый новый снимок делает картину только запутаннее.

Name: MindBreak 2026 by ESGI (an MindBreak event.)
Date: July 3, 2026, 9 p.m. — 04 July 2026, 06:00 UTC  [add to calendar]
Format: Jeopardy
On-site
Location: Paris, France
Offical URL: https://linktr.ee/m1ndbr34k
Rating weight: 0.00
Event organizers: ESGI

Name: Fluid Attacks' CTF 2026-2 (an Fluid Attacks CTF event.)
Date: July 4, 2026, 1 p.m. — 05 July 2026, 01:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://fluidattacks.com/ctf
Rating weight: 0
Event organizers: Fluid Attacks

A vulnerability labeled as critical has been found in OpenAsset Digital Asset Management up to 12.0.19. Impacted is an unknown function of the file /Stream/ProjectsCSV. Executing a manipulation can lead to improper access controls. The identification of this vulnerability is CVE-2020-28861. The attack needs to be done within the local network. There is no exploit available.

A vulnerability categorized as problematic has been discovered in EgavilanMedia User Registration & Login System with Admin Panel 1.0. This affects an unknown function. Executing a manipulation can lead to cross-site request forgery. This vulnerability is handled as CVE-2020-35273. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability identified as problematic has been detected in DotCMS Add Template with Admin Panel 20.11. This impacts an unknown function. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2020-35274. The attack is possible to be carried out remotely. Moreover, an exploit is present.