Aggregator

Currently trending CVE - hypeScore: 9 - Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the `git-credential(1)` command without checking for embedded line-ending control characters, and then sends any credential

Il requisito 7.4 della ISO/IEC 27001:2022 riveste un’importanza strategica nella protezione delle in

Investire e innovare mediante soluzioni di intelligenza artificiale può essere un valido volano di c

Sebbene le potenzialità di DeepSeek siano evidenti, tanto da essere diventata l’app gratuita di AI g

DeepSeek, che in queste ore ha cambiato il mondo dell’IA, ha recentemente raggiunto la vetta della c

Il CSIRT ha rilevato una campagna di phishing via SMS (smishing) a tema Poste Italiane, mirata a car

Le feste sono finite ma sembrerebbe che “la festa” di attacchi informatici non accenni a terminare.

UK organizations are significantly increasing cybersecurity budgets, with a projected 31% growth in the next year

A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql injection. This vulnerability is handled as CVE-2025-0874. The attack may be launched remotely. Furthermore, there is an exploit available.

Работодатели превращают домашние офисы в зоны контроля, а сотрудники готовы платить за свою приватность.

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /customeredit.php. The manipulation of the argument id/address/fullname/phonenumber/email/city/comment leads to sql injection. This vulnerability is known as CVE-2025-0873. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /addpayment.php. The manipulation of the argument id/amount/desc/inccat leads to sql injection. This vulnerability is traded as CVE-2025-0872. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in vruizg VR-Frases Plugin up to 3.0.1 on WordPress. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument several leads to sql injection. The identification of this vulnerability is CVE-2025-0861. The attack may be initiated remotely. There is no exploit available.

Submit #488538 / VDB-294068

A vulnerability was found in SonicWall NetExtender up to 10.3.0 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component Client Log Export. The manipulation leads to improper privilege management. This vulnerability was named CVE-2025-23007. The attack can only be done within the local network. There is no exploit available.

A vulnerability was found in Dell NetWorker up to 19.9/19.10.0.6/19.11.0.2. It has been classified as critical. This affects an unknown part. The manipulation leads to unquoted search path. This vulnerability is uniquely identified as CVE-2025-21107. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in vruizg VR-Frases Plugin up to 3.0.1 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-0860. The attack may be launched remotely. There is no exploit available.