Aggregator

CVE-2025-7888 | TDuckCloud tduck-platform 5.1 UserFormDataMapper.java UserFormDataMapper formKey sql injection (EUVD-2025-22009)

Vuldb Updates
9 months 4 weeks ago
A vulnerability classified as critical was found in TDuckCloud tduck-platform 5.1. This issue affects the function UserFormDataMapper of the file src/main/java/com/tduck/cloud/form/mapper/UserFormDataMapper.java. Executing manipulation of the argument formKey can lead to sql injection. This vulnerability is tracked as CVE-2025-7888. The attack can be launched remotely. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Akira Ransomware exploits year-old SonicWall flaw with multiple vectors

Security Affairs
9 months 4 weeks ago
Researchers warn that Akira ransomware group is exploiting a year-old SonicWall firewall flaw, likely using three attack vectors for initial access. The Akira ransomware group is exploiting a year-old SonicWall firewall vulnerability, tracked as CVE-2024-40766 (CVSS score of 9.3), likely using three attack vectors for initial access, according to Rapid7. “Evidence collected during Rapid7’s investigations […]
Pierluigi Paganini

CVE-2025-3085 | MongoDB Server up to 5.0.30/6.0.19/7.0.15/8.0.3 on Linux Certificate Chain improper check for certificate revocation (Nessus ID 264379)

Vuldb Updates
9 months 4 weeks ago
A vulnerability, which was classified as critical, was found in MongoDB Server up to 5.0.30/6.0.19/7.0.15/8.0.3 on Linux. Affected by this vulnerability is an unknown functionality of the component Certificate Chain Handler. Such manipulation leads to improper check for certificate revocation. This vulnerability is traded as CVE-2025-3085. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.
vuldb.com

CVE-2025-8277 | Red Hat Enterprise Linux/OpenShift Container Platform libssh memory leak (Nessus ID 264494)

Vuldb Updates
9 months 4 weeks ago
A vulnerability, which was classified as problematic, was found in Red Hat Enterprise Linux and OpenShift Container Platform. Affected by this issue is some unknown functionality of the component libssh. Such manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2025-8277. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2024-47674 | Linux Kernel up to 6.1.110/6.6.51/6.10.10 mmap reference count (Nessus ID 209512 / WID-SEC-2024-3182)

Vuldb Updates
9 months 4 weeks ago
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.1.110/6.6.51/6.10.10. This issue affects the function mmap. The manipulation leads to improper update of reference count. This vulnerability is documented as CVE-2024-47674. The attack requires being on the local network. Additionally, an exploit exists. It is suggested to upgrade the affected component.
vuldb.com

Top 10 Best Cloud Penetration Testing Companies in 2025

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
9 months 4 weeks ago

Cloud is the foundation of modern business, but it comes with a complex and evolving security landscape. Traditional penetration testing, which focuses on on-premise networks and applications, is not sufficient to secure these dynamic environments. Cloud penetration testing requires specialized expertise to identify and exploit vulnerabilities unique to cloud-native architectures, including misconfigurations, insecure identity and […]

The post Top 10 Best Cloud Penetration Testing Companies in 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Varshini

CVE-2025-48544

CVE Trends
9 months 4 weeks ago
Currently trending CVE - Hype Score: 16 - In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Managed ad