Aggregator

A vulnerability classified as critical has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This affects an unknown part of the file /password-recovery.php of the component Password Recovery Page. The manipulation of the argument username leads to sql injection. This vulnerability is uniquely identified as CVE-2025-2372. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /registered-user-testing.php of the component Registered Mobile Number Search. The manipulation of the argument regmobilenumber leads to cross site scripting. This vulnerability is handled as CVE-2025-2371. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #515444 / VDB-299874

Submit #515429 / VDB-299873

Submit #515455 / VDB-299872

Submit #515408 / VDB-299872

Submit #515390 / VDB-299871

Submit #515389 / VDB-299871

Submit #515347 / VDB-299870

Ученые проверили, как чат-боты справляются с проверкой новостей. И результаты не радуют.

A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected by this vulnerability is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to stack-based buffer overflow. This vulnerability is known as CVE-2025-2370. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument admpass leads to stack-based buffer overflow. This vulnerability is traded as CVE-2025-2369. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::(anonymous namespace)::BinaryReaderInterp::OnExport of the file wabt/src/interp/binary-reader-interp.cc of the component Malformed File Handler. The manipulation leads to heap-based buffer overflow. The identification of this vulnerability is CVE-2025-2368. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Submit #515329 / VDB-299869

Submit #515328 / VDB-299868

Submit #515327 / VDB-299867

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool   Ragnar Loader   Desert Dexter. Attacks on Middle Eastern countries   Ballista – New IoT Botnet Targeting Thousands of TP-Link Archer Routers Microsoft patches […]

A vulnerability has been found in Oiwtech OIW-2431APGN-HP 2.5.3-B20131128 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formScript of the component Personal Script Submenu. The manipulation leads to os command injection. This vulnerability was named CVE-2025-2367. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Ознакомьтесь с последними трендами в сфере рекламного антифрода, узнайте о роли AI и Big Data в обнаружении фрод-схем и прогнозах по защите рекламных кампаний.

A vulnerability, which was classified as problematic, was found in gougucms 4.08.18. This affects the function add of the file /admin/department/add of the component Add Department Page. The manipulation of the argument title leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-2366. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.