Aggregator

CVE-2025-5299 | SourceCodester Client Database Management System 1.0 user_order_customer_update.php uploaded_file_cancelled unrestricted upload

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_order_customer_update.php. The manipulation of the argument uploaded_file_cancelled leads to unrestricted upload. This vulnerability was named CVE-2025-5299. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

Zero-Interaction libvpx Flaw in Firefox Allows Attackers to Run Arbitrary Code

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
8 months 2 weeks ago

Mozilla has released Firefox 139, addressing several critical and moderate security vulnerabilities that posed significant risks to users. The update, announced on May 27, 2025, resolves issues ranging from memory corruption and local code execution to cross-origin data leaks, reinforcing Firefox’s commitment to user safety. Double-Free in libvpx Encoder: One of the most severe vulnerabilities […]

The post Zero-Interaction libvpx Flaw in Firefox Allows Attackers to Run Arbitrary Code appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anupriya

INE Security And RedTeam Hacker Academy Announce Partnership To Advance Cybersecurity Skills In The Middle East

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
8 months 2 weeks ago

INE Security, a global cybersecurity training and certification provider, today announced a strategic partnership with RedTeam Hacker Academy through the signing of a Memorandum of Understanding (MoU). This agreement significantly accelerates INE Security’s expansion strategy in the Middle East and Africa (MEA) region while enhancing cybersecurity training capabilities across the market. The agreement was formalized […]

The post INE Security And RedTeam Hacker Academy Announce Partnership To Advance Cybersecurity Skills In The Middle East appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

CyberNewswire

CVE-2025-26383 | Johnson Controls iSTAR Configuration Utility up to 6.9.4 uninitialized variable (icsa-25-146-01)

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability was found in Johnson Controls iSTAR Configuration Utility up to 6.9.4. It has been classified as problematic. This affects an unknown part. The manipulation leads to use of uninitialized variable. This vulnerability is uniquely identified as CVE-2025-26383. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-4947 | cURL up to 8.13.0 QUIC Certificate certificate validation

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability was found in cURL up to 8.13.0 and classified as critical. Affected by this issue is some unknown functionality of the component QUIC Certificate Handler. The manipulation leads to improper certificate validation. This vulnerability is handled as CVE-2025-4947. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-5025 | cURL up to 8.13.0 QUIC Certificate certificate validation

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability has been found in cURL up to 8.13.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component QUIC Certificate Handler. The manipulation leads to improper certificate validation. This vulnerability is known as CVE-2025-5025. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Chaos

Dark Feed IO
8 months 2 weeks ago

You must login to view this content

cohenido

LogicGate brings risk management to individual business units

Help Net Security
8 months 2 weeks ago

LogicGate is elevating its Risk Cloud platform with a new Operational Risk Management (ORM) Solution designed to allow organizations to prioritize risks based on process criticality and financial impact. By helping minimize operational disruptions, such as failed internal processes, inadequate systems, and natural disasters, ORM helps ensure the resilience of the organization. With role-based dashboards tailored to specific stakeholders and lines of defense, LogicGate’s new ORM solution enables Risk Cloud users to quantify and visualize … More →

The post LogicGate brings risk management to individual business units appeared first on Help Net Security.

Industry News

CVE-2025-5298 | Campcodes Online Hospital Management System 1.0 betweendates-detailsreports.php fromdate/todate sql injection

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability, which was classified as critical, was found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/betweendates-detailsreports.php. The manipulation of the argument fromdate/todate leads to sql injection. This vulnerability is traded as CVE-2025-5298. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-5297 | SourceCodester Computer Store System 1.0 main.c Add laptopcompany/RAM/Processor stack-based overflow

VulDB Recent Entries
8 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2025-5297. An attack has to be approached locally. Furthermore, there is an exploit available.
vuldb.com

Apple Blocks $9 Billion in Fraud Over 5 Years Amid Rising App Store Threats

The Hackers News
8 months 2 weeks ago
Apple on Tuesday revealed that it prevented over $9 billion in fraudulent transactions in the last five years, including more than $2 billion in 2024 alone. The company said the App Store is confronted by a wide range of threats that seek to defraud users in various ways, ranging from "deceptive apps designed to steal personal information to fraudulent payment schemes that attempt to exploit
The Hacker News

Managed ad