Aggregator

CVE-2025-5435 | Marwal Infotech CMS 1.0 /page.php ID sql injection

Vuldb Updates
10 months ago
A vulnerability was found in Marwal Infotech CMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /page.php. The manipulation of the argument ID leads to sql injection. This vulnerability was named CVE-2025-5435. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-5436 | Multilaser Sirius RE016 MLT1.0 /cgi-bin/cstecgi.cgi information disclosure

Vuldb Updates
10 months ago
A vulnerability was found in Multilaser Sirius RE016 MLT1.0. It has been rated as problematic. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2025-5436. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

INC

Dark Feed IO
10 months ago

You must login to view this content

cohenido

INC

Dark Feed IO
10 months ago

You must login to view this content

cohenido

CVE-2025-29385 | Tenda AC9 15.03.05.14_multi /goform/AdvSetMacMtuWan cloneType stack-based overflow (EUVD-2025-6519)

Vuldb Updates
10 months ago
A vulnerability, which was classified as critical, was found in Tenda AC9 15.03.05.14_multi. Affected is an unknown function of the file /goform/AdvSetMacMtuWan. The manipulation of the argument cloneType leads to stack-based buffer overflow. This vulnerability is traded as CVE-2025-29385. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-29384 | Tenda AC9 15.03.05.14_multi /goform/AdvSetMacMtuWan wanMTU stack-based overflow (EUVD-2025-6520)

Vuldb Updates
10 months ago
A vulnerability was found in Tenda AC9 15.03.05.14_multi and classified as critical. Affected by this issue is some unknown functionality of the file /goform/AdvSetMacMtuWan. The manipulation of the argument wanMTU leads to stack-based buffer overflow. This vulnerability is handled as CVE-2025-29384. The attack may be launched remotely. There is no exploit available.
vuldb.com

Critical Roundcube Flaw Allows Remote Code Execution by Attackers

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
10 months ago

Roundcube Webmail, one of the most widely used browser-based IMAP clients, has released urgent security updates for its 1.6 and 1.5 LTS versions. The newly published versions, 1.6.11 and 1.5.10, address a critical post-authentication remote code execution (RCE) vulnerability stemming from PHP object deserialization. This flaw, reported by security researcher firs0v, could allow attackers with […]

The post Critical Roundcube Flaw Allows Remote Code Execution by Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Anupriya

New Study Reveals Vulnerable Code Pattern Putting GitHub Projects at Risk of Path Traversal Attacks

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
10 months ago

A comprehensive research study has identified a widespread path traversal vulnerability (CWE-22) affecting 1,756 open-source GitHub projects, some of which are highly influential in the software ecosystem. The vulnerability, present in a commonly used Node.js code pattern for creating static HTTP file servers, enables attackers to access files outside of restricted locations, potentially compromising confidentiality […]

The post New Study Reveals Vulnerable Code Pattern Putting GitHub Projects at Risk of Path Traversal Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

CVE-2025-0324 | Axis Communications AB AXIS OS up to 11.11.139/12.3.32 VAPIX Device Configuration Framework incomplete filtering of special elements

VulDB Recent Entries
10 months ago
A vulnerability was found in Axis Communications AB AXIS OS up to 11.11.139/12.3.32. It has been rated as very critical. This issue affects some unknown processing of the component VAPIX Device Configuration Framework. The manipulation leads to incomplete filtering of special elements. The identification of this vulnerability is CVE-2025-0324. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-0325 | Axis Communications AB AXIS OS up to 8.40.73/9.80.99/10.12.277/11.11.141/12.4.27 Guard Tour VAPIX API improper validation of specified type of input

VulDB Recent Entries
10 months ago
A vulnerability was found in Axis Communications AB AXIS OS up to 8.40.73/9.80.99/10.12.277/11.11.141/12.4.27. It has been declared as problematic. This vulnerability affects unknown code of the component Guard Tour VAPIX API. The manipulation leads to improper validation of specified type of input. This vulnerability was named CVE-2025-0325. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-0358 | Axis Communications AB AXIS OS up to 12.3.x VAPIX Device Configuration Framework privileges management

VulDB Recent Entries
10 months ago
A vulnerability was found in Axis Communications AB AXIS OS up to 12.3.x. It has been classified as critical. This affects an unknown part of the component VAPIX Device Configuration Framework. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2025-0358. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad