Aggregator

A vulnerability was found in Campcodes Advanced Online Voting Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/voters_add.php. Executing manipulation of the argument photo can lead to unrestricted upload. This vulnerability is tracked as CVE-2025-11417. The attack can be launched remotely. Moreover, an exploit is present.

For years, security leaders have treated artificial intelligence as an “emerging” technology, something to keep an eye on but not yet mission-critical. A new Enterprise AI and SaaS Data Security Report by AI & Browser Security company LayerX proves just how outdated that mindset has become. Far from a future concern, AI is already the single largest uncontrolled channel for corporate data

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1 and classified as critical. This affects an unknown part of the file /admin/invoices.php. Performing manipulation of the argument delid results in sql injection. This vulnerability is identified as CVE-2025-11416. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability, which was classified as critical, was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/customer-list.php. Such manipulation of the argument delid leads to sql injection. This vulnerability is referenced as CVE-2025-11415. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Лауреатами стали американские ученые Джон Кларк, Мишель Деворе и Джон Мартинис.

Submit #665597 / VDB-327353

Submit #665596 / VDB-327352

Submit #665594 / VDB-327351

Submit #665599 / VDB-282646

A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The identification of this vulnerability is CVE-2025-11414. The attack can only be executed locally. Furthermore, there is an exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. This vulnerability was named CVE-2025-11413. The attack needs to be approached locally. In addition, an exploit is available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2025-11412. Local access is required to approach this attack. Moreover, an exploit is present. To fix this issue, it is recommended to deploy a patch.

Хакеры превратили код в печатный станок для токенов.

Submit #665591 / VDB-327350

Submit #665587 / VDB-327349

Cybersecurity researchers have charted the evolution of XWorm malware, turning it into a versatile tool for supporting a wide range of malicious actions on compromised hosts. "XWorm's modular design is built around a core client and an array of specialized components known as plugins," Trellix researchers Niranjan Hegde and Sijo Jacob said in an analysis published last week. "These plugins are

A 13-year-old flaw with a CVSS score of 10 in the popular data storage service allows for full host takeover, and more than 300k instances are currently exposed.

Discord said a third-party customer services provider was compromised to access user data, with the attackers aiming to extort a financial ransom

A novel zero-day vulnerability in Oracle E-Business Suite (CVE-2025-61882) is being actively exploited in a large-scale data exfiltration campaign, with CrowdStrike Intelligence attributing primary involvement to the GRACEFUL SPIDER threat group and warning that public proof-of-concept details will spur further attacks. On August 9, 2025, the first suspected exploitation of an unauthenticated remote code execution […]

The post CrowdStrike Alerts on Oracle E-Business Suite 0-Day Under Mass Exploitation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated cyberattack has compromised Red Hat Consulting’s infrastructure, potentially exposing sensitive data from over 5,000 enterprise customers worldwide. The breach, executed by the extortion group Crimson Collective, has raised serious concerns about the security of critical business documentation and source code belonging to major corporations, including Vodafone, HSBC, American Express, and Walmart. Red Hat, […]

The post Red Hat Breach Exposes 5000+ High Profile Enterprise Customers at Risk appeared first on Cyber Security News.