Aggregator

CVE-2019-4716 | IBM Planning Analytics up to 2.0.8 TM1 Script privileges management (ID 156953 / EDB-48273)

Vuldb Updates
10 months 2 weeks ago
A vulnerability classified as critical has been found in IBM Planning Analytics up to 2.0.8. This affects an unknown part of the component TM1 Script Handler. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2019-4716. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2010-0968 | Geekhelps ADMP 1.01 Help bannershow.php click sql injection (EDB-11721 / OSVDB-63046)

Vuldb Updates
10 months 2 weeks ago
A vulnerability classified as critical was found in Geekhelps ADMP 1.01. Affected by this vulnerability is an unknown functionality of the file bannershow.php of the component Help. The manipulation of the argument click leads to sql injection. This vulnerability is known as CVE-2010-0968. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

U.S. DoJ Seizes 4 Domains Supporting Cybercrime Crypting Services in Global Operation

The Hackers News
10 months 2 weeks ago
A multinational law enforcement operation has resulted in the takedown of an online cybercrime syndicate that offered services to threat actors to ensure that their malicious software stayed undetected from security software. To that effect, the U.S. Department of Justice (DoJ) said it seized four domains and their associated server facilitated the crypting service on May 27, 2025, in
The Hacker News

CVE-2025-26520 | Cacti up to 1.2.29 host_templates.php template graph_template sql injection (EUVD-2025-4207)

Vuldb Updates
10 months 2 weeks ago
A vulnerability has been found in Cacti up to 1.2.29 and classified as critical. This vulnerability affects the function template of the file host_templates.php. The manipulation of the argument graph_template leads to sql injection. This vulnerability was named CVE-2025-26520. The attack can be initiated remotely. There is no exploit available.
vuldb.com

CVE-2025-26789 | Logpoint AgentX up to 1.4.x special elements used in a template engine (EUVD-2025-4244)

Vuldb Updates
10 months 2 weeks ago
A vulnerability has been found in Logpoint AgentX up to 1.4.x and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper neutralization of special elements used in a template engine. This vulnerability was named CVE-2025-26789. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-26788 | StrongKey FIDO Server up to 4.15.0 authorization (EUVD-2025-4243)

Vuldb Updates
10 months 2 weeks ago
A vulnerability, which was classified as critical, was found in StrongKey FIDO Server up to 4.15.0. This affects an unknown part. The manipulation leads to authorization bypass. This vulnerability is uniquely identified as CVE-2025-26788. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2011-4166 | HP Managed Printing Administration up to 2.6.2 path traversal (EDB-27013 / Nessus ID 57700)

Vuldb Updates
10 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in HP Managed Printing Administration up to 2.6.2. Affected by this issue is some unknown functionality of the component Administration. The manipulation leads to path traversal. This vulnerability is handled as CVE-2011-4166. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Threat Actors Leverage Google Apps Script To Host Phishing Websites

Cyber Security News
10 months 2 weeks ago

Cybercriminals have escalated their tactics by exploiting Google Apps Script, a trusted development platform, to host sophisticated phishing campaigns that bypass traditional security measures. This emerging threat represents a significant shift in how attackers leverage legitimate infrastructure to enhance the credibility of their malicious operations. The latest campaign targets unsuspecting users through deceptive invoice emails […]

The post Threat Actors Leverage Google Apps Script To Host Phishing Websites appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2012-3232 | Webatall web@all prior 2.0 search.php _text[title] cross site scripting (EDB-37435 / BID-54109)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in Webatall web@all and classified as problematic. Affected by this issue is some unknown functionality of the file search.php. The manipulation of the argument _text[title] leads to cross site scripting. This vulnerability is handled as CVE-2012-3232. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2000-0329 | Microsoft Internet Explorer 4.0/4.0.1/5.0 ActiveX Control CAB File privileges management (MS99-048 / EDB-19603)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in Microsoft Internet Explorer 4.0/4.0.1/5.0 and classified as critical. Affected by this issue is some unknown functionality of the component ActiveX Control Handler. The manipulation as part of CAB File leads to improper privilege management. This vulnerability is handled as CVE-2000-0329. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2005-1594 | CodeThat ShoppingCart 1.3.1 ping catalog.php ID sql injection (EDB-25638 / Nessus ID 18255)

Vuldb Updates
10 months 2 weeks ago
A vulnerability classified as critical was found in CodeThat ShoppingCart 1.3.1. Affected by this vulnerability is an unknown functionality of the file catalog.php of the component ping. The manipulation of the argument ID leads to sql injection. This vulnerability is known as CVE-2005-1594. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad