Aggregator

China-linked APT41 targets government, think tanks, and academics tied to US-China trade and policy

Security Affairs
9 months 3 weeks ago
China-linked group APT41 impersonated a U.S. lawmaker in phishing attacks on government, think tanks, and academics tied to US-China trade and policy. Proofpoint observed China-linked cyber espionage group APT41 impersonating a U.S. lawmaker in a phishing campaign targeting government, think tanks, and academics tied to U.S.-China trade and policy. APT41, known also as Amoeba, BARIUM, […]
Pierluigi Paganini

Zero Day Malware

Security Boulevard
9 months 3 weeks ago

Cybersecurity is a race against time. Every day, businesses face sophisticated threats designed to exploit the smallest vulnerabilities. Among the most dangerous of these are Zero Day Malware attacks — malicious software that targets unknown flaws before vendors or defenders even know they exist. Zero day malware represents the pinnacle of stealth and danger. Unlike

The post Zero Day Malware appeared first on Seceon Inc.

The post Zero Day Malware appeared first on Security Boulevard.

Pushpendra Mishra

CVE-2025-58751 | vitejs vite up to 5.4.19/6.3.5/7.0.6/7.1.4 Setting path traversal (GHSA-g4jq-h2w9-997c)

Vuldb Updates
9 months 3 weeks ago
A vulnerability was found in vitejs vite up to 5.4.19/6.3.5/7.0.6/7.1.4. It has been rated as critical. This affects an unknown function of the component Setting Handler. This manipulation causes path traversal. This vulnerability is registered as CVE-2025-58751. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-8007 | Rockwell Automation 1756-ENT2R/1756-EN4TR/1756-EN4TRXT Communication denial of service

Vuldb Updates
9 months 3 weeks ago
A vulnerability has been found in Rockwell Automation 1756-ENT2R, 1756-EN4TR and 1756-EN4TRXT and classified as critical. This affects an unknown part of the component Communication Module. Performing manipulation results in denial of service. This vulnerability was named CVE-2025-8007. The attack needs to be approached within the local network. There is no available exploit.
vuldb.com

CVE-2025-8008 | Rockwell Automation 1756-ENT2R/1756-EN4TR/1756-EN4TRXT Message exceptional condition

Vuldb Updates
9 months 3 weeks ago
A vulnerability was found in Rockwell Automation 1756-ENT2R, 1756-EN4TR and 1756-EN4TRXT. It has been declared as critical. Impacted is an unknown function of the component Message Handler. The manipulation results in handling of exceptional conditions. This vulnerability is identified as CVE-2025-8008. The attack can only be performed from the local network. There is not any exploit available.
vuldb.com

CVE-2025-55727 | xwikisas xwiki-pro-macros up to 1.26.4 width eval injection (GHSA-hxqp-983c-m8h9)

Vuldb Updates
9 months 3 weeks ago
A vulnerability described as critical has been identified in xwikisas xwiki-pro-macros up to 1.26.4. This affects an unknown function. Such manipulation of the argument width leads to improper neutralization of directives in dynamically evaluated code. This vulnerability is uniquely identified as CVE-2025-55727. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.
vuldb.com

CVE-2025-55728 | xwikisas xwiki-pro-macros up to 1.26.4 classes eval injection (GHSA-48f4-h726-74p5)

Vuldb Updates
9 months 3 weeks ago
A vulnerability labeled as very critical has been found in xwikisas xwiki-pro-macros up to 1.26.4. Impacted is an unknown function. Such manipulation of the argument classes leads to improper neutralization of directives in dynamically evaluated code. This vulnerability is listed as CVE-2025-55728. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.
vuldb.com

CVE-2025-10473 | yangzongzhuan RuoYi up to 4.8.1 Blacklist SqlUtil.java filterKeyword sql injection

Vuldb Updates
9 months 3 weeks ago
A vulnerability classified as critical was found in yangzongzhuan RuoYi up to 4.8.1. This impacts the function filterKeyword of the file /com/ruoyi/common/utils/sql/SqlUtil.java of the component Blacklist Handler. The manipulation results in sql injection. This vulnerability is cataloged as CVE-2025-10473. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-10479 | SourceCodester Online Student File Management System 1.0 /index.php stud_no sql injection (EUVD-2025-29255)

Vuldb Updates
9 months 3 weeks ago
A vulnerability identified as critical has been detected in SourceCodester Online Student File Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument stud_no results in sql injection. This vulnerability was named CVE-2025-10479. The attack may be initiated remotely. In addition, an exploit is available.
vuldb.com

CVE-2025-10405 | itsourcecode Baptism Information Management System 1.0 /listbaptism.php bapt_id sql injection (EUVD-2025-29129)

Vuldb Updates
9 months 3 weeks ago
A vulnerability was found in itsourcecode Baptism Information Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument bapt_id causes sql injection. The identification of this vulnerability is CVE-2025-10405. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-10407 | SourceCodester Student Grading System 1.0 /view_user.php ID sql injection (EUVD-2025-29131)

Vuldb Updates
9 months 3 weeks ago
A vulnerability was found in SourceCodester Student Grading System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view_user.php. Such manipulation of the argument ID leads to sql injection. This vulnerability is referenced as CVE-2025-10407. It is possible to launch the attack remotely. Furthermore, an exploit is available.
vuldb.com

CVE-2025-10408 | SourceCodester Student Grading System 1.0 /edit_user.php ID sql injection (EUVD-2025-29130)

Vuldb Updates
9 months 3 weeks ago
A vulnerability was found in SourceCodester Student Grading System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /edit_user.php. Performing manipulation of the argument ID results in sql injection. This vulnerability is identified as CVE-2025-10408. The attack can be initiated remotely. Additionally, an exploit exists.
vuldb.com

CVE-2025-10409 | SourceCodester Student Grading System 1.0 /rms.php?page=users fname sql injection (EUVD-2025-29133)

Vuldb Updates
9 months 3 weeks ago
A vulnerability categorized as critical has been discovered in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulation of the argument fname can lead to sql injection. This vulnerability is tracked as CVE-2025-10409. The attack can be launched remotely. Moreover, an exploit is present.
vuldb.com

CVE-2025-5715 | Signal App 7.41.4 on Android Biometric Authentication missing critical step in authentication (EUVD-2025-17044)

Vuldb Updates
9 months 3 weeks ago
A vulnerability, which was classified as problematic, has been found in Signal App 7.41.4 on Android. Affected by this issue is some unknown functionality of the component Biometric Authentication Handler. Performing manipulation results in missing critical step in authentication. This vulnerability is known as CVE-2025-5715. The attack may be carried out on the physical device. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Managed ad