Aggregator

Orleans Parish Sheriff’s Office Falls Victim to Qilin Ransomware

稳定币反洗钱与合规路径技术研究报告 by ourren

被忽视的“GitHub Actions Supply Chain Attack”事件 by ourren

YASA：开源的静态程序分析项目 by ourren

基于流间时空关联分析的图神经网络网站指纹识别方法 by ourren

更多最新文章，请访问SecWiki

A vulnerability was found in Campcodes Online Job Finder System 1.0. It has been classified as critical. This affects an unknown function of the file /index.php?q=result&searchfor=bycompany. This manipulation of the argument Search causes sql injection. This vulnerability is handled as CVE-2025-10448. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in Campcodes Online Job Finder System 1.0 and classified as critical. The impacted element is an unknown function of the file /eris/applicationform.php. The manipulation of the argument picture results in unrestricted upload. This vulnerability is known as CVE-2025-10447. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0 and classified as critical. The affected element is an unknown function of the file /pages/cust_searchfrm.php?action=edit. The manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2025-10446. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/us_transac.php?action=add. Executing manipulation of the argument Username can lead to sql injection. This vulnerability appears as CVE-2025-10445. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability, which was classified as critical, has been found in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /advancesearch.php. Performing manipulation of the argument Username results in sql injection. This vulnerability is reported as CVE-2025-10444. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Submit #648023 / VDB-323882

Submit #648014 / VDB-323881

A vulnerability classified as critical was found in Tenda AC9 and AC15 15.03.05.14/15.03.05.18. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Such manipulation of the argument cmdinput leads to buffer overflow. This vulnerability is documented as CVE-2025-10443. The attack can be executed remotely. Additionally, an exploit exists.

Submit #647887 / VDB-323880

Submit #647886 / VDB-323879

A vulnerability classified as critical has been found in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. This vulnerability is registered as CVE-2025-10442. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Submit #647851 / VDB-323878

A vulnerability described as critical has been identified in D-Link DI-8100G, DI-8200G and DI-8003G 17.12.20A1/19.12.10A1. Affected by this issue is the function sub_433F7C of the file version_upgrade.asp of the component jhttpd. The manipulation of the argument path results in os command injection. This vulnerability is cataloged as CVE-2025-10441. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability marked as critical has been reported in D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G 16.07.26A1/17.12.20A1/19.12.10A1. Affected by this vulnerability is the function sub_4621DC of the file usb_paswd.asp of the component jhttpd. The manipulation of the argument hname leads to os command injection. This vulnerability is listed as CVE-2025-10440. The attack may be initiated remotely. In addition, an exploit is available.

Submit #647841 / VDB-257373

Submit #647840 / VDB-323877

Submit #647839 / VDB-323876

全球领先AI安全公司 Virtue AI 正在招聘｜Junior Member of Technical Staff