Aggregator

CVE-2025-9823 | Mautic up to 4.4.16/5.2.7/6.0.4 ajax?action=lead:addLeadTags cross site scripting

VulDB Recent Entries
10 months ago
A vulnerability classified as problematic has been found in Mautic up to 4.4.16/5.2.7/6.0.4. The affected element is an unknown function of the file /s/ajax?action=lead:addLeadTags. This manipulation causes cross site scripting. This vulnerability is registered as CVE-2025-9823. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-58615 | gfazioli WP Bannerize Pro Plugin up to 1.10.0 on WordPress server-side request forgery

VulDB Recent Entries
10 months ago
A vulnerability was found in gfazioli WP Bannerize Pro Plugin up to 1.10.0 on WordPress. It has been rated as critical. Affected by this vulnerability is an unknown functionality. This manipulation causes server-side request forgery. The identification of this vulnerability is CVE-2025-58615. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-57052 | cJSON up to 1.7.18 cJSON_Utils.c decode_array_index_from_pointer array index

VulDB Recent Entries
10 months ago
A vulnerability was found in cJSON up to 1.7.18. It has been classified as critical. This impacts the function decode_array_index_from_pointer of the file cJSON_Utils.c. The manipulation leads to improper validation of array index. This vulnerability is uniquely identified as CVE-2025-57052. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2025-57147 | PHPGurukul Complaint Management System 2.0 user/registration.php fullname/email/contactno sql injection

VulDB Recent Entries
10 months ago
A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. This affects an unknown function of the file user/registration.php. Executing manipulation of the argument fullname/email/contactno can lead to sql injection. This vulnerability is handled as CVE-2025-57147. The attack can be executed remotely. There is not any exploit available.
vuldb.com

BSidesSF 2025: The Four Tribes Of Security Champions

Security Boulevard
10 months ago

Creator, Author and Presenter: Marisa Fagan

Our deep appreciation to Security BSides - San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon - certainly a venue like no other; and via the organization's YouTube channel.

Additionally, the organization is welcoming volunteers for the BSidesSF Volunteer Force, as well as their Program Team & Operations roles. See their succinct BSidesSF 'Work With Us' page, in which, the appropriate information is to be had!

Permalink

The post BSidesSF 2025: The Four Tribes Of Security Champions appeared first on Security Boulevard.

Marc Handelman

Managed ad