Aggregator

In today’s digital landscape, maintaining secure and efficient IT systems is critical for organizations. Patch management tools play a vital role in achieving this by automating the process of identifying, testing, and deploying software updates and security patches across various devices and applications. These tools help mitigate vulnerabilities, improve system performance, and ensure compliance with […]

The post 10 Best Patch Management Tools 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In today’s digital era, businesses are increasingly adopting cloud computing to store data, run applications, and manage infrastructure. However, as organizations shift to the cloud, they face new security challenges such as cyber threats, data breaches, and compliance risks. This is where cloud security solutions come into play. These solutions are designed to protect sensitive […]

The post 10 Best Cloud Security Solutions 2025 appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Security researchers have identified a concerning trend in the cyber threat landscape as state-sponsored hackers from multiple countries have begun adopting a relatively new social engineering technique called “ClickFix” in their espionage operations. The technique, which emerged in early March 2024 in cybercriminal circles, has rapidly gained popularity among advanced persistent threat (APT) groups due […]

The post State Sponsored Hackers Now Widely Using ClickFix Attack Technique in Espionage Campaigns appeared first on Cyber Security News.

A vulnerability, which was classified as problematic, was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the file add-supplier.php. The manipulation of the argument txtsupplier_name/txtaddress leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-3826. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this issue is some unknown functionality of the file add-category.php. The manipulation of the argument txtcategory_name leads to cross site scripting. This vulnerability is handled as CVE-2025-3825. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file add-product.php. The manipulation of the argument txtprice/txtproduct_name leads to cross site scripting. This vulnerability is known as CVE-2025-3824. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected is an unknown function of the file add-stock.php. The manipulation of the argument txttotalcost/txtproductID/txtprice/txtexpirydate leads to cross site scripting. This vulnerability is traded as CVE-2025-3823. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file changepassword.php. The manipulation of the argument txtconfirm_password/txtnew_password/txtold_password leads to cross site scripting. The identification of this vulnerability is CVE-2025-3822. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file add-admin.php. The manipulation of the argument txtpassword/txtfullname/txtemail leads to cross site scripting. This vulnerability was named CVE-2025-3821. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #555918 / VDB-305728

Submit #555906 / VDB-280339

Public exploits are now available for a critical Erlang/OTP SSH vulnerability tracked as CVE-2025-32433, allowing unauthenticated attackers to remotely execute code on impacted devices. [...]

A vulnerability classified as critical has been found in Node.js up to 20.11.0/21.6.1. This affects an unknown part of the component Experimental Permission Model. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2024-21896. Attacking locally is a requirement. There is no exploit available.

A vulnerability classified as critical was found in Yocto Project poky up to 3.1.30/4.0.15/4.3.1. This vulnerability affects unknown code of the component HTTP Handler. The manipulation leads to os command injection. This vulnerability was named CVE-2024-25626. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Moodle. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Language Pack Handler. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2024-25982. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in NetApp StorageGRID up to 11.7. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-21984. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Liferay Portal and DXP. Affected is an unknown function of the component External URL Handler. The manipulation of the argument _com_liferay_address_web_internal_portlet_CountriesManagementAdminPortlet_redirect leads to open redirect. This vulnerability is traded as CVE-2023-5190. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in dfir-iris iris-web up to 2.3.x. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to improper neutralization of alternate xss syntax. The identification of this vulnerability is CVE-2024-25640. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

在 Newsletters 插件版本 4.9.9.7 或更低版本的插件仪表板 (/wp-admin/admin.php?page=newsletters) 中查看统计概览图表时，由于输入验证和 URL