Aggregator

A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function sendEmailCode of the file src/main/java/co/yiiu/pybbs/controller/api/SettingsApiController.java of the component Registered Email Handler. The manipulation of the argument email leads to information exposure through error message. The identification of this vulnerability is CVE-2025-8548. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as critical. This vulnerability affects unknown code of the component Email Verification Handler. The manipulation leads to improper authorization. This vulnerability was named CVE-2025-8547. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects the function adminlogin/login of the component Verification Code Handler. The manipulation leads to guessable captcha. This vulnerability is uniquely identified as CVE-2025-8546. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Since mid-2022, Chinese military-industrial networks have reportedly been the target of highly sophisticated cyber intrusions attributed to US intelligence agencies. These campaigns exploited previously unknown vulnerabilities to install stealthy malware, maintain prolonged access, and exfiltrate sensitive defense data. Initially identified following an NSA breach at Northwestern Polytechnical University, the latest incidents uncovered by CNCERT illustrate […]

The post CNCERT Accuses of US Intelligence Agencies Attacking Chinese Military-Industrial Units appeared first on Cyber Security News.

Submit #622199 / VDB-318684

Submit #622198 / VDB-318683

Submit #622197 / VDB-318682

Submit #622196 / VDB-318681

Submit #622195 / VDB-318680

Submit #622194 / VDB-318679

Submit #622187 / VDB-318678

Submit #622186 / VDB-318677

Submit #622180 / VDB-318676

Submit #622179 / VDB-318675

Jen Easterly, a West Point graduate who led CISA during the Biden Administration, had her appointment to head a department at the academy rescinded after a complaint by Laura Loomer, a right-wing MAGA adherent who spoke out in a X posting to Defense Secretary Pete Hegseth.

The post Ex-CISA Head Easterly: Rescinded West Point Post Victim of ‘Manufactured Outrage’ appeared first on Security Boulevard.

Jen Easterly曾担任美国网络安全机构CISA负责人，在拜登政府工作三年后被撤销西点军校教职。右翼人物Laura Loomer指控她利用职位压制特朗普支持者，并质疑她在特朗普政府中获得高职位的问题。陆军部长随后撤销了她的职位。Easterly认为这是党派斗争的结果，损害了军队的信任基础，并强调军校应保持非政治化。此外，特朗普一直批评CISA偏离核心任务，并试图削减其预算。

A vulnerability was found in Schben Adive 2.0.7. It has been rated as problematic. This issue affects some unknown processing of the file Internal/Views/config.php. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2019-14346. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Schben Adive 2.0.7. Affected is an unknown function of the file Internal/Views/addUsers.php. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2019-14347. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in WordPress up to 5.0.0. Affected is an unknown function of the file jpg?file.php. The manipulation with the input jpg?file.php as part of String leads to code injection. This vulnerability is traded as CVE-2019-8942. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in WordPress up to 5.0.3. Affected by this vulnerability is the function wp_crop_image. The manipulation with the input .jpg?/../../file.jpg as part of String leads to path traversal. This vulnerability is known as CVE-2019-8943. The attack can be launched remotely. Furthermore, there is an exploit available.