Aggregator

Submit #656004 / VDB-325189

Submit #656016 / VDB-325188

Submit #655993 / VDB-325187

Submit #655906 / VDB-325186

Submit #655902 / VDB-325185

Cloudflare launched 15 years ago. We like to celebrate our birthday by launching new products that give back to the Internet. But we've also been thinking a lot about what's changed on the Internet.

A critical combination of legacy components could have allowed complete access to the Microsoft Entra ID tenant of every company in the world. [...]

ESET found evidence that Russia-linked groups Gamaredon and Turla collaborated in cyberattacks on Ukraine between February and April 2025. ESET reported Russia-linked groups Gamaredon and Turla collaborated in cyberattacks against entities in Ukraine. The Russia-linked APT group Gamaredon (a.k.a. Shuckworm, Armageddon, Primitive Bear, ACTINIUM, Callisto) is known for targeting government, law enforcement, and defense organizations in Ukraine since 2013. The Turla APT group (aka Snake, Uroburos, Waterbug, Venomous […]

Когда флэш-память упирается в физику, ДНК предлагает выход с плотностью и сроком хранения.

IOC Alert: Unam Web Panel Command-and-Control Infrastructure

Ровер собрали, денег пожалели… но возобновили проект спустя годы.

A vulnerability was found in PHPJabbers Restaurant Menu Maker up to 1.1. It has been classified as problematic. Affected by this issue is some unknown functionality of the file /preview.php. This manipulation of the argument theme causes cross site scripting. This vulnerability appears as CVE-2025-10827. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate results in sql injection. This vulnerability is reported as CVE-2025-10826. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability has been found in Campcodes Online Beauty Parlor Management System 1.0 and classified as critical. Affected is an unknown function of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. This vulnerability is documented as CVE-2025-10825. The attack can be initiated remotely. Additionally, an exploit exists.

Submit #655884 / VDB-325184

Submit #655882 / VDB-325158

Submit #654384 / VDB-325183

Submit #654379 / VDB-325182

Submit #654387 / VDB-257603

Submit #654386 / VDB-257605