Aggregator

Submit #604570 / VDB-298564

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. This vulnerability was named CVE-2025-6900. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #606156 / VDB-314399

Submit #606158 / VDB-314398

Submit #606157 / VDB-314397

Submit #604569 / VDB-314396

Submit #604568 / VDB-314395

Introduction Let’s be honest — passwords are a pain. They’re either too simple and easy to guess, or so complicated […]

The post How Passkeys Work (Explained Simply) appeared first on Security Boulevard.

A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12.20A1/19.12.25A1. This affects an unknown part of the file msp_info.htm. The manipulation of the argument flag/cmd/iface leads to os command injection. This vulnerability is uniquely identified as CVE-2025-6899. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue is some unknown functionality of the file in proxy_client.asp. The manipulation of the argument proxy_srv/proxy_lanport/proxy_lanip/proxy_srvport leads to os command injection. This vulnerability is handled as CVE-2025-6898. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpd_debug.asp. The manipulation of the argument Time leads to os command injection. This vulnerability is known as CVE-2025-6897. Access to the local network is required for this attack. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wget_test.asp. The manipulation of the argument url leads to os command injection. This vulnerability is traded as CVE-2025-6896. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Submit #604509 / VDB-314394

Submit #604508 / VDB-314393

Submit #604504 / VDB-314392

Submit #604450 / VDB-280129

Submit #604444 / VDB-314391

Submit #604443 / VDB-314390

Submit #604442 / VDB-314389

Submit #604441 / VDB-314388