Aggregator

A vulnerability, which was classified as critical, was found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/us_transac.php?action=add. Executing manipulation of the argument Username can lead to sql injection. This vulnerability appears as CVE-2025-10445. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability classified as problematic has been found in Gen Digital CCleaner on Windows. This affects an unknown function. The manipulation leads to files or directories accessible. This vulnerability is listed as CVE-2025-3025. The attack must be carried out locally. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in H3C Device R365V300R004 and classified as critical. This vulnerability affects unknown code. Such manipulation leads to use of default password. This vulnerability is referenced as CVE-2025-57577. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0 and classified as critical. The affected element is an unknown function of the file /pages/cust_searchfrm.php?action=edit. The manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2025-10446. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Burger King has invoked the U.S. Digital Millennium Copyright Act (DMCA) to force the removal of a security researcher’s blog post that exposed critical vulnerabilities in its drive-thru “Assistant” system.  The move has caused a debate over the use of copyright law to suppress legitimate cybersecurity disclosures. Key Takeaways1. Burger King issued a DMCA takedown […]

The post Burger King Uses DMCA Complaint to Take Down Blog Post Detailing Security Flaws on Drive-Thru Systems appeared first on Cyber Security News.

Submit #648548 / VDB-323919

某主营业务为对外提供人工智能模型训练基础数据（算料）的科技有限公司，在处理人脸等生物识别类敏感个人信息前，未按《个人信息保护法》有关规定进行个人信息保护影响评估。属地公安机关依据《个人信息保护法》规定，对该公司依法予以行政处罚，并责令整改。

金融监管总局、公安部持续加大工作协同力度，深化行政执法与刑事司法衔接，重拳出击严厉打击金融领域“黑灰产”突出违法犯罪行为，取得积极成效。

近日，国家互联网信息办公室发布《国家网络安全事件报告管理办法》，旨在进一步规范网络安全事件报告，减少安全事件造成的损失和危害，维护国家网络安全。这一举措对于完善我国网络安全治理体系、提升网络安全保障能力具有重要意义。

9月15日，2025年国家网络安全宣传周开幕式在云南省昆明市举行。

Submit #648597 / VDB-323918

Submit #648580 / VDB-323917

Submit #648542 / VDB-323916

Submit #648541 / VDB-323915

Submit #648520 / VDB-323914

Vulnerabilities are discovered daily—but not every alert matters. SecAlerts pulls from 100+ sources for faster, real-time vuln alerts, filtering the noise so teams can patch quicker and stay secure. [...]

At DjangoCon US 2025, speakers emphasized seasoned tech over hype, featuring secure GitOps workflows, simpler frontend alternatives, and sustainable open-source models.

The post DjangoCon US 2025: Security, Simplicity, and Community appeared first on Security Boulevard.

CISA's Secure by Design planted a flag. Now, it's on those who care about safeguarding systems to pick up the torch and take action to secure systems throughout the enterprise.

Оказывается, чем проще файл, тем сложнее атака.