Aggregator

CVE-2025-1220 | PHP up to 8.1.32/8.2.28/8.3.22/8.4.9 Null Character fsockopen Hostname server-side request forgery (GHSA-3cr5-j632-f35r / EUVD-2025-21274)

Vuldb Updates
1 month 1 week ago
A vulnerability classified as critical was found in PHP up to 8.1.32/8.2.28/8.3.22/8.4.9. Affected by this vulnerability is the function fsockopen of the component Null Character Handler. Such manipulation of the argument Hostname leads to server-side request forgery. This vulnerability is documented as CVE-2025-1220. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

Over 1,200 arrested in Africa-wide cybercrime crackdown, Interpol says

不安全
1 month 1 week ago
国际刑警组织在非洲开展打击网络犯罪行动，逮捕超1200人并查获近9740万美元赃款。安哥拉关闭非法加密货币矿场，赞比亚破获大型投资诈骗案。技术快速发展为网络犯罪提供机会，西非成新热点。尼日利亚判处九名中国人参与诈骗。

CISA Warns of Actively Exploited 0-Day Vulnerability in Apple iOS, iPadOS, and macOS

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
1 month 1 week ago

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical zero-day vulnerability affecting Apple iOS, iPadOS, and macOS systems that is being actively exploited in the wild. CVE-2025-43300, an out-of-bounds write vulnerability in Apple’s Image I/O framework, poses significant security risks to millions of users across Apple’s ecosystem. Critical Vulnerability […]

The post CISA Warns of Actively Exploited 0-Day Vulnerability in Apple iOS, iPadOS, and macOS appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

CVE-2025-9331 | Spacious Plugin up to 1.9.11 on WordPress Demo Data Import welcome_notice_import_handler authorization

Vuldb Updates
1 month 1 week ago
A vulnerability classified as critical was found in Spacious Plugin up to 1.9.11 on WordPress. The impacted element is the function welcome_notice_import_handler of the component Demo Data Import. Such manipulation leads to missing authorization. This vulnerability is referenced as CVE-2025-9331. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2025-57895 | Hossni Mubarak JobWP Plugin up to 2.4.3 on WordPress cross-site request forgery (EUVD-2025-25518)

VulDB Recent Entries
1 month 1 week ago
A vulnerability was found in Hossni Mubarak JobWP Plugin up to 2.4.3 on WordPress. It has been declared as problematic. Impacted is an unknown function. Executing manipulation can lead to cross-site request forgery. This vulnerability is registered as CVE-2025-57895. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2025-57893 | Epsiloncool WP Fast Total Search Plugin up to 1.79.270 on WordPress cross-site request forgery (EUVD-2025-25516)

VulDB Recent Entries
1 month 1 week ago
A vulnerability was found in Epsiloncool WP Fast Total Search Plugin up to 1.79.270 on WordPress and classified as problematic. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. This vulnerability is listed as CVE-2025-57893. The attack may be performed from a remote location. There is no available exploit.
vuldb.com

CVE-2025-57888 | NooTheme Jobmonster Plugin up to 4.8.0 on WordPress exposure of sensitive system information to an unauthorized control sphere

VulDB Recent Entries
1 month 1 week ago
A vulnerability has been found in NooTheme Jobmonster Plugin up to 4.8.0 on WordPress and classified as problematic. This affects an unknown part. This manipulation causes exposure of sensitive system information to an unauthorized control sphere. This vulnerability is tracked as CVE-2025-57888. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2025-57892 | Jeff Starr Simple Statistics for Feeds Plugin up to 20250322 on WordPress cross-site request forgery (EUVD-2025-25515)

VulDB Recent Entries
1 month 1 week ago
A vulnerability, which was classified as problematic, was found in Jeff Starr Simple Statistics for Feeds Plugin up to 20250322 on WordPress. Affected by this issue is some unknown functionality. The manipulation results in cross-site request forgery. This vulnerability is identified as CVE-2025-57892. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-57894 | ollybach WPPizza Plugin up to 3.19.8 on WordPress authorization (EUVD-2025-25517)

VulDB Recent Entries
1 month 1 week ago
A vulnerability, which was classified as problematic, has been found in ollybach WPPizza Plugin up to 3.19.8 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing authorization. This vulnerability is referenced as CVE-2025-57894. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

Managed ad