Aggregator
CVE-2025-58450 | prest up to 2.0.0-rc2 sql injection (GHSA-p46v-f2x8-qp98)
CVE-2025-58453 | LabRedesCefetRJ WeGIA up to 3.4.10 exibe_anexo.php id_anexo sql injection (GHSA-gg48-pg9f-39fx)
CVE-2025-58454 | LabRedesCefetRJ WeGIA up to 3.4.10 listar_despachos.php id_memorando sql injection (GHSA-ghfh-g6rg-jmqf)
CVE-2025-42944 | SAP Netweaver 7.50 RMI-P4 deserialization
CVE-2025-42925 | SAP NetWeaver AS Java 7.50 JAVA IIOP Service predictable state
CVE-2025-42911 | SAP NetWeaver up to 816 authorization
CVE-2025-58745 | LabRedesCefetRJ WeGIA up to 3.4.10 PHP File controla_xlsx.php code injection (GHSA-hq96-gvmx-qrwp)
CVE-2025-58449 | MahoCommerce maho up to 25.8.x PHP File Parser reliance on file name or extension of externally-supplied file (GHSA-vgmm-27fc-vmgp)
CVE-2025-42958 | SAP NetWeaver up to KRNL64UC 7.22 unnecessary privileges
Connected cars are racing ahead, but security is stuck in neutral
Connected cars are already on Europe’s roads, loaded with software, sensors, and constant data connections. Drivers love the features these vehicles bring, from remote apps to smart navigation, but each new connection also opens a door to potential cyber risks. What makes cars smarter is the same thing that makes them more vulnerable. A new study from Óbuda University in Budapest and the University of Oslo sheds light on these threats, where current rules fall … More →
The post Connected cars are racing ahead, but security is stuck in neutral appeared first on Help Net Security.
CVE-2025-42927 | SAP NetWeaver AS Java 7.50 Adobe Document Service vulnerable third-party component
虚假PDF编辑器暗藏TamperedChef信息窃取恶意软件
«СёрчИнформ» проведет серию бесплатных ИБ-конференций
Kill
You must login to view this content
Lynx
You must login to view this content
Chinese Hackers Salt Typhoon and UNC4841 Team Up to Breach Critical Infrastructure
Cybersecurity researchers at Silent Push have uncovered a sophisticated Chinese espionage operation linking two prominent threat actors, Salt Typhoon and UNC4841, revealing previously unreported infrastructure used to target government and corporate networks across more than 80 countries. The discovery of 45 malicious domains dating back to 2020 demonstrates the extensive reach and long-term persistence of […]
The post Chinese Hackers Salt Typhoon and UNC4841 Team Up to Breach Critical Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Yurei
You must login to view this content