Posts of last few hours
Один сбой копирует тысячи генов и может переписать судьбу вида.
https://www.securitylab.ru/news/576859.php
A public proof-of-concept (PoC) repository has revealed a local privilege escalation zero-day vulnerability in GenDigital’s Avast Antivirus. This vulnerability allows an attacker to dump the Windows Security Account Manager (SAM) database and launch a shell running as NT AUTHORITY\SYSTEM. The researcher behind the repository, known as MSNightmare, claims that the issue affects fully patched installations […]
The post Avast Antivirus Zero-Day PoC Lets Attackers Dump SAM Database and Gain SYSTEM Shell appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
https://gbhackers.com/avast-antivirus-zero-day-poc/
QR-code phishing, commonly known as quishing, is evolving beyond image-based payloads. Threat actors are now rendering scannable QR codes directly from HTML tables or text within email bodies, leaving no image attachment, embedded bitmap, or <img> element for traditional email scanners to inspect. The technique targets a structural blind spot in Secure Email Gateways (SEGs). […]
The post HTML-Rendered QR Phishing Evades Image Extraction and OCR-Based Email Scanning appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
https://gbhackers.com/html-rendered-qr-phishing/
Там, где раньше собирали группу профессионалов, теперь хватает и одного человека.
https://www.securitylab.ru/news/576843.php
A vulnerability was found in moxi159753 Mogu Blog v2 up to 5.2. It has been rated as critical. The affected element is an unknown function of the file /file/pictures. This manipulation of the argument filedatas causes unrestricted upload.
This vulnerability appears as CVE-2025-13815. The attack may be initiated remotely. In addition, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
https://vuldb.com/vuln/333824
A vulnerability categorized as critical has been discovered in moxi159753 Mogu Blog v2 up to 5.2. The impacted element is the function FileOperation.unzip of the file /networkDisk/unzipFile of the component ZIP File Handler. Such manipulation of the argument fileUrl leads to path traversal.
This vulnerability is traded as CVE-2025-13816. The attack may be launched remotely. Furthermore, there is an exploit available.
The vendor was contacted early about this disclosure but did not respond in any way.
https://vuldb.com/vuln/333825
A vulnerability was found in Yohann0617 oci-helper up to 3.2.4 and classified as critical. This issue affects the function addCfg of the file src/main/java/com/yohann/ocihelper/service/impl/OciServiceImpl.java of the component OCI Configuration Upload. Executing a manipulation of the argument File can lead to path traversal.
This vulnerability is registered as CVE-2025-13875. It is possible to launch the attack remotely. Furthermore, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
https://vuldb.com/vuln/334031
A vulnerability was found in nocobase up to 1.9.4/2.0.0-alpha.37. It has been declared as problematic. The affected element is an unknown function of the file nocobase\packages\core\auth\src\base\jwt-service.ts of the component JWT Service. The manipulation of the argument API_KEY results in use of hard-coded cryptographic key
.
This vulnerability is reported as CVE-2025-13877. The attack can be launched remotely. Moreover, an exploit is present.
The vendor was contacted early about this disclosure but did not respond in any way.
https://vuldb.com/vuln/334033
A vulnerability labeled as problematic has been found in ObjectPlanet Opinio 7.26 rev12562. Affected is an unknown function of the component survey-import. Executing a manipulation can lead to cross site scripting.
This vulnerability is handled as CVE-2025-13873. The attack can be executed remotely. There is not any exploit available.
https://vuldb.com/vuln/334037
A vulnerability was found in Schneider Electric EcoStruxure Power Build Rapsody. It has been classified as critical. Affected is an unknown function of the component SSD File Parser. This manipulation causes use after free.
This vulnerability is registered as CVE-2025-13845. Remote exploitation of the attack is possible. No exploit is available.
To fix this issue, it is recommended to deploy a patch.
https://vuldb.com/vuln/341396
A vulnerability classified as very critical was found in Schneider Electric EcoStruxure Power Build Rapsody. This affects an unknown function of the component SSD File Parser. Executing a manipulation can lead to double free.
The identification of this vulnerability is CVE-2025-13844. The attack may be launched remotely. There is no exploit available.
It is advisable to implement a patch to correct this issue.
https://vuldb.com/vuln/341405
A vulnerability marked as problematic has been reported in ESET Management Agent up to 12.5.2104.0. This vulnerability affects unknown code. This manipulation causes time-of-check time-of-use.
This vulnerability is tracked as CVE-2025-13818. The attack is restricted to local execution. No exploit exists.
https://vuldb.com/vuln/344678
A vulnerability categorized as critical has been discovered in MCPHub up to 0.10.x. Affected by this vulnerability is an unknown functionality of the component Endpoint. Such manipulation leads to authorization bypass.
This vulnerability is uniquely identified as CVE-2025-13822. The attack can be launched remotely. No exploit exists.
It is advisable to upgrade the affected component.
https://vuldb.com/vuln/357303
A vulnerability categorized as critical has been discovered in enquirer up to 2.4.1. Affected is the function Enquirer.set of the component Public Package API. The manipulation of the argument question.name results in improperly controlled modification of object prototype attributes.
This vulnerability is reported as CVE-2026-15187. The attack can be launched remotely. Moreover, an exploit is present.
The project was informed of the problem early through an issue report.
https://vuldb.com/vuln/377113
A vulnerability labeled as critical has been found in aerostackdev aerostack-mcp up to 6315dfde7df0a15aaf743f88d91347115e09ba23. Affected by this issue is the function upload_media of the component mcp-whatsapp. Such manipulation of the argument media_url leads to server-side request forgery.
This vulnerability is traded as CVE-2026-15189. The attack may be launched remotely. There is no exploit available.
This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.
The project was informed of the problem early through an issue report but has not responded yet.
https://vuldb.com/vuln/377115
Plex urged users this week to update their desktop clients and media servers immediately to patch multiple security vulnerabilities. [...]
https://www.bleepingcomputer.com/news/security/plex-warns-users-to-patch-security-vulnerabilities-immediately/
A vulnerability was found in Online Diagnostic Lab Management System 1.0. It has been classified as critical. The impacted element is an unknown function of the file /tests/view_test.php. The manipulation of the argument ID leads to sql injection.
This vulnerability is traded as CVE-2022-43162. It is possible to initiate the attack remotely. There is no exploit available.
https://vuldb.com/vuln/213870
A vulnerability marked as problematic has been reported in timg 1.4.4. The affected element is the function timg::QueryBackgroundColor of the file /timg/src/term-query.cc. Performing a manipulation results in memory leak.
This vulnerability is cataloged as CVE-2022-43151. The attack must originate from the local network. There is no exploit available.
https://vuldb.com/vuln/212560
A vulnerability described as critical has been identified in tsMuxer 2.6.16. The impacted element is the function BitStreamWriter::flushBits in the library /tsMuxer/bitStream.h. Executing a manipulation can lead to heap-based buffer overflow.
This vulnerability is registered as CVE-2022-43152. The attack requires access to the local network. No exploit is available.
https://vuldb.com/vuln/212561
Latest Blog Posts
- 2 weeks ago
- 2 months 2 weeks ago
- 2 months 2 weeks ago
- 2 months 2 weeks ago
- 2 months 2 weeks ago
- 7 months 1 week ago
- 1 year ago
- 1 year ago
- 1 year 1 month ago
- 1 year 5 months ago