Aggregator

A vulnerability classified as problematic was found in yzane vscode-markdown-pdf 1.5.0. The impacted element is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2024-7739. The attack may be performed from remote. In addition, an exploit is available.

Cybersecurity vendor Palo Alto Networks disclosed that its Salesforce environment was breached through a compromised Salesloft Drift integration, marking the latest in a series of supply chain attacks targeting customer relationship management platforms. According to a statement from Palo Alto Networks, Salesloft’s Drift application—used by hundreds of organizations to streamline sales engagement—suffered an intrusion that […]

The post Palo Alto Networks Confirms Data Breach via Compromised Salesforce Instances appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability described as critical has been identified in ns_backup Backup Plus Extension up to 13.0.2 on TYPO3. The affected element is an unknown function. The manipulation results in os command injection. This vulnerability is reported as CVE-2025-9573. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical was found in Copeland LP E2 Facility Management System up to 4.11F02. Affected by this vulnerability is an unknown functionality. Executing manipulation can lead to missing authentication. This vulnerability appears as CVE-2025-52551. The attack may be performed from remote. There is no available exploit.

A vulnerability classified as critical was found in Red Hat Enterprise Linux 6/7/8/9/10. This issue affects some unknown processing of the component D-BUS Interface. Such manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-2025-8067. The attack needs to be performed locally. There is not any exploit available.

A vulnerability, which was classified as critical, was found in openSUSE Tumbleweed up to 2.11.28. Affected is an unknown function. Executing manipulation can lead to symlink following. This vulnerability is handled as CVE-2025-46810. It is possible to launch the attack on the local host. There is not any exploit available. You should upgrade the affected component.

A vulnerability classified as problematic has been found in Akinsoft OctoCloud up to 1.11.00. Affected is an unknown function of the component HTTP Response Handler. Performing manipulation results in origin validation error. This vulnerability is reported as CVE-2024-12973. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Akinsoft OctoCloud up to 1.11.00. This affects an unknown part. The manipulation results in cross site scripting. This vulnerability is known as CVE-2024-12972. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

Google has firmly rejected widespread reports suggesting it issued a global security alert to its 2.5 billion Gmail users, calling such claims “entirely false”. The tech giant moved swiftly to clarify the situation after viral headlines sparked unnecessary panic among users worldwide. Recent reports circulated claiming that Google had sent out widespread notifications warning all […]

The post Google Dismiss Reports of Major Gmail Security Alert appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Palo Alto Networks hit by Drift-linked supply-chain attack, exposing Salesforce customer data and support cases via stolen OAuth tokens. Palo Alto Networks is another victim of the Salesloft Drift incident, which allowed attackers to access its Salesforce account, as per BleepingComputer. The company discloses a breach after attackers used stolen OAuth tokens from Salesloft Drift, […]

A vulnerability described as problematic has been identified in SUSE Rancher up to 0.11.9/0.12.5. This impacts an unknown function of the component BundleDeployment. Such manipulation leads to cleartext storage of sensitive information. This vulnerability is documented as CVE-2024-52284. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability, which was classified as problematic, has been found in Akinsoft OctoCloud up to 1.11.00. Affected by this issue is some unknown functionality. The manipulation leads to authorization bypass. This vulnerability is traded as CVE-2025-0640. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in rsbi-pom 4.7 and classified as critical. This issue affects some unknown processing of the file /bi/service/model/DatasetService. Such manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2025-57140. The attack can be launched remotely. No exploit exists.

A vulnerability classified as problematic has been found in PHPGurukul Employee Leave Management System 2.1. The impacted element is an unknown function of the file leave-details.php. This manipulation of the argument leaveid causes improper control of resource identifiers. This vulnerability appears as CVE-2025-56254. The attack may be initiated remotely. There is no available exploit.

A vulnerability has been found in SUSE rancher up to 2.9.10/2.10.8/2.11.4/2.12.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component API Endpoint. The manipulation leads to allocation of resources. This vulnerability is uniquely identified as CVE-2024-58259. The attack is possible to be carried out remotely. No exploit exists. The affected component should be upgraded.

A vulnerability has been found in Akinsoft OctoCloud up to 1.11.00 and classified as problematic. This vulnerability affects unknown code. This manipulation causes improper restriction of excessive authentication attempts. This vulnerability is handled as CVE-2025-2414. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

招聘进行中，超多优质岗位等你来选，京东安全期待你的加入！

The Office of the Pennsylvania Attorney General announced that a ransomware attack is behind the ongoing two-week service outage. [...]

A vulnerability categorized as problematic has been discovered in code-projects Fruit Shop Management System 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. Such manipulation of the argument product_code/gen_name/product_name/supplier leads to cross site scripting. This vulnerability is referenced as CVE-2025-9845. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A newly discovered spearphishing campaign is targeting executives and senior leadership across multiple industries by exploiting trusted OneDrive document‐sharing notifications. The Stripe OLT SOC has identified this sophisticated attack, which leverages highly tailored emails to impersonate internal HR communications and harvest corporate credentials through a convincing Microsoft Office/OneDrive login page. At the heart of the […]

The post OneDrive Phishing Attack Targets Corporate Executives for Credential Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.