Aggregator

Submit #587059 / VDB-311123

Submit #587057 / VDB-311122

Submit #587048 / VDB-311121

A critical flaw in Roundcube webmail, undetected for 10 years, allows attackers to take over systems and execute arbitrary code. A critical flaw, tracked as CVE-2025-49113 (CVSS score of 9.9) has been discovered in the Roundcube webmail software. The vulnerability went unnoticed for over a decade, an attacker can exploit the flaw to take control […]

A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/users.php. The manipulation of the argument change_to_admin leads to sql injection. This vulnerability is known as CVE-2025-5632. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post leads to sql injection. This vulnerability is traded as CVE-2025-5631. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in WF Steuerungstechnik airleader MASTER 3.0046 and classified as problematic. This issue affects some unknown processing. The manipulation leads to path traversal: '.../...//'. The identification of this vulnerability is CVE-2025-5598. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Они калибровали винтики, гоняли мюоны по кольцу, охотились за привидением — но призрак новой физики не явился.

Submit #589783 / VDB-311120

Submit #589781 / VDB-311119

Submit #589780 / VDB-311118

A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. This vulnerability affects unknown code of the file /goform/form2lansetup.cgi. The manipulation of the argument ip leads to stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability was named CVE-2025-5630. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #589782 / VDB-239510

Submit #589779 / VDB-311116

A vulnerability, which was classified as critical, was found in Tenda AC10 up to 15.03.06.47. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg of the component HTTP Handler. The manipulation of the argument startIp/endIp leads to buffer overflow. This vulnerability is uniquely identified as CVE-2025-5629. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Government institutions worldwide face a growing number of sophisticated cyberattacks. This case study examines how ANY.RUN’s solutions can be leveraged to detect, analyze, and mitigate cyber threats targeting government organizations.  By analyzing real-world threats, we demonstrate how ANY.RUN’s Threat Intelligence Lookup, Interactive Sandbox, and YARA Search assist cybersecurity teams in identifying attack vectors, tracking malicious […]

The post Cyber Attacks on Government Agencies: Detect and Investigate with ANY.RUN for Fast Response appeared first on ANY.RUN's Cybersecurity Blog.

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Menu Manager 1.0. Affected by this issue is some unknown functionality of the file /index.php of the component Add Menu Handler. The manipulation of the argument name/description leads to cross site scripting. This vulnerability is handled as CVE-2025-5628. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /sputum_form.php. The manipulation of the argument itr_no leads to sql injection. This vulnerability is known as CVE-2025-5627. The attack can be launched remotely. Furthermore, there is an exploit available.

The North Korean state-sponsored hacking group APT37 has launched a sophisticated spear phishing campaign in March 2025, targeting activists focused on North Korean issues. Disguised as invitations to an academic forum hosted by a South Korean national security think tank, these emails cleverly referenced a real event titled “Trump 2.0 Era: Prospects and South Korea’s […]

The post APT37 Hackers Fake Academic Forum Invites to Deliver Malicious LNK Files via Dropbox Platform appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #589424 / VDB-311115