Aggregator

CVE-2025-8737 | zlt2000 microservices-platform up to 6.0.0 OauthLogoutSuccessHandler.java onLogoutSuccess redirect_url (Issue 78 / EUVD-2025-24016)

Vuldb Updates
6 months 1 week ago
A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. The manipulation of the argument redirect_url leads to open redirect. This vulnerability is uniquely identified as CVE-2025-8737. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-8738 | zlt2000 microservices-platform up to 6.0.0 Spring Actuator Interface /actuator information disclosure (Issue 79 / EUVD-2025-24015)

Vuldb Updates
6 months 1 week ago
A vulnerability has been found in zlt2000 microservices-platform up to 6.0.0 and classified as problematic. This vulnerability affects unknown code of the file /actuator of the component Spring Actuator Interface. The manipulation leads to information disclosure. This vulnerability was named CVE-2025-8738. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.
vuldb.com

CVE-2025-8739 | zhenfeng13 My-Blog up to 1.0.0 /admin/tags/save tagName cross-site request forgery (Issue 145 / EUVD-2025-24019)

Vuldb Updates
6 months 1 week ago
A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The identification of this vulnerability is CVE-2025-8739. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

永安在线金融行业案例

信息安全知识库
6 months 1 week ago
本文链接


银行反洗钱方案案例 银行黄牛攻防系统搭建方案案例 银行反营销欺诈解决方案 保险业务安全建设方案案例 保险营销反欺诈方案案例 保险营销发欺诈方案案例 证券反欺诈解决方案案例 证券数据资产泄露解决方案

永安在线金融行业案例

不安全
6 months 1 week ago
本文介绍了金融行业的安全解决方案案例，包括银行的反洗钱、黄牛攻防及营销欺诈防范，保险业务的安全建设与营销反欺诈措施，以及证券领域的反欺诈和数据资产保护方案。

Supply Chain Alert: Malicious Go Packages Found Targeting Windows and Linux

Penetration Testing Tools - Metepreter.org
6 months 1 week ago

Cybersecurity researchers have uncovered 11 malicious Go packages designed to download additional components from remote servers and execute them on both Windows and Linux systems. According to Socket researcher Olivia Brown, during execution the...

The post Supply Chain Alert: Malicious Go Packages Found Targeting Windows and Linux appeared first on Penetration Testing Tools.

ddos

Lynx

Dark Feed IO
6 months 1 week ago

You must login to view this content

cohenido

Managed ad