Aggregator

CVE-2025-10080 | running-elephant Datart up to 1.0.0-rc3 API AESUtil.java getTokensecret hard-coded key

VulDB Recent Entries
2 days 9 hours ago
A vulnerability was found in running-elephant Datart up to 1.0.0-rc3. It has been classified as problematic. Affected by this issue is the function getTokensecret of the file datart/security/src/main/java/datart/security/util/AESUtil.java of the component API. The manipulation leads to use of hard-coded cryptographic key . This vulnerability is uniquely identified as CVE-2025-10080. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com

CVE-2025-10079 | PHPGurukul Small CRM 4.0 /get-quote.php Contact sql injection (EUVD-2025-27104)

VulDB Recent Entries
2 days 9 hours ago
A vulnerability was found in PHPGurukul Small CRM 4.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Contact can lead to sql injection. This vulnerability is handled as CVE-2025-10079. The attack can be executed remotely. Additionally, an exploit exists.
vuldb.com

BSidesSF 2025: Everyday AI: Leveraging LLMs For Simple, Effective Security Automation

Security Boulevard
2 days 9 hours ago

Creator, Author and Presenter: Matthew Sullivan, Dominic Zanardi

Our deep appreciation to Security BSides - San Francisco and the Creators, Authors and Presenters for publishing their BSidesSF 2025 video content on YouTube. Originating from the conference’s events held at the lauded CityView / AMC Metreon - certainly a venue like no other; and via the organization's YouTube channel.

Additionally, the organization is welcoming volunteers for the BSidesSF Volunteer Force, as well as their Program Team & Operations roles. See their succinct BSidesSF 'Work With Us' page, in which, the appropriate information is to be had!

Permalink

The post BSidesSF 2025: Everyday AI: Leveraging LLMs For Simple, Effective Security Automation appeared first on Security Boulevard.

Marc Handelman

CVE-2025-10078 | SourceCodester Online Polling System 1.0 /admin/candidates.php ID sql injection

VulDB Recent Entries
2 days 12 hours ago
A vulnerability has been found in SourceCodester Online Polling System 1.0 and classified as critical. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. This vulnerability is known as CVE-2025-10078. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
vuldb.com

CVE-2025-10077 | SourceCodester Online Polling System 1.0 /registeracc.php email sql injection (EUVD-2025-27103)

VulDB Recent Entries
2 days 12 hours ago
A vulnerability, which was classified as critical, was found in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. This vulnerability is traded as CVE-2025-10077. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-10076 | SourceCodester Online Polling System 1.0 /manage-profile.php email sql injection (EUVD-2025-27101)

VulDB Recent Entries
2 days 12 hours ago
A vulnerability, which was classified as critical, has been found in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. This vulnerability appears as CVE-2025-10076. The attack may be initiated remotely. In addition, an exploit is available.
vuldb.com

CVE-2025-10075 | SourceCodester Online Polling System 1.0 /manage-profile.php firstname cross site scripting (EUVD-2025-27102)

VulDB Recent Entries
2 days 12 hours ago
A vulnerability classified as problematic was found in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. This vulnerability is reported as CVE-2025-10075. The attack can be launched remotely. Moreover, an exploit is present.
vuldb.com

Managed ad