Aggregator

CVE-2025-34112 | Riverbed SteelCentral NetExpress/SteelCentral NetProfiler 10.8.7 /api/common/1.0/login sql injection (Exploit 40108 / EUVD-2025-21430)

Vuldb Updates
2 months ago
A vulnerability was found in Riverbed SteelCentral NetExpress and SteelCentral NetProfiler 10.8.7. It has been declared as critical. This vulnerability affects unknown code of the file /api/common/1.0/login. The manipulation leads to sql injection. This vulnerability was named CVE-2025-34112. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-34115 | ITRS OP5 Monitor up to 7.1.9 Web Interface command_test.php cmd_str os command injection (EUVD-2025-21432 / EDB-39676)

Vuldb Updates
2 months ago
A vulnerability classified as critical has been found in ITRS OP5 Monitor up to 7.1.9. Affected is an unknown function of the file command_test.php of the component Web Interface. The manipulation of the argument cmd_str leads to os command injection. This vulnerability is traded as CVE-2025-34115. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-34116 | IPFire up to 2.18 CGI Interface proxy.cgi os command injection (EUVD-2025-21433 / EDB-39765)

Vuldb Updates
2 months ago
A vulnerability has been found in IPFire up to 2.18 and classified as critical. This vulnerability affects unknown code of the file proxy.cgi of the component CGI Interface. The manipulation leads to os command injection. This vulnerability was named CVE-2025-34116. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-52376 | Nexxt NCM-X1800 up to 1.2.7 Telnet Service /web/um_open_telnet.cgi hard-coded credentials (EUVD-2025-21439)

Vuldb Updates
2 months ago
A vulnerability was found in Nexxt NCM-X1800 up to 1.2.7 and classified as critical. This issue affects some unknown processing of the file /web/um_open_telnet.cgi of the component Telnet Service. The manipulation leads to hard-coded credentials. The identification of this vulnerability is CVE-2025-52376. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-52378 | Nexxt NCM-X1800 up to 1.2.7 Device Management Page um_device_set_aliasname DEVICE_ALIAS cross site scripting (EUVD-2025-21440)

Vuldb Updates
2 months ago
A vulnerability, which was classified as problematic, was found in Nexxt NCM-X1800 up to 1.2.7. Affected is an unknown function of the file /web/um_device_set_aliasname of the component Device Management Page. The manipulation of the argument DEVICE_ALIAS leads to cross site scripting. This vulnerability is traded as CVE-2025-52378. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

Threat Actors Mimic CNN, BBC, and CNBC Websites to Promote Investment Scams

Cyber Security News
2 months ago

Cybersecurity researchers have identified a sophisticated international fraud campaign that leverages impersonated news websites from major outlets including CNN, BBC, CNBC, News24, and ABC News to orchestrate large-scale investment scams. The operation demonstrates advanced social engineering tactics combined with technical deception methods to target victims across multiple countries. The campaign operates through a multi-stage attack […]

The post Threat Actors Mimic CNN, BBC, and CNBC Websites to Promote Investment Scams appeared first on Cyber Security News.

Tushar Subhra Dutta

Newly Emerged GLOBAL GROUP RaaS Expands Operations with AI-Driven Negotiation Tools

The Hackers News
2 months ago
Cybersecurity researchers have shed light on a new ransomware-as-a-service (RaaS) operation called GLOBAL GROUP that has targeted a wide range of sectors in Australia, Brazil, Europe, and the United States since its emergence in early June 2025. GLOBAL GROUP was "promoted on the Ramp4u forum by the threat actor known as '$$$,'" EclecticIQ researcher Arda Büyükkaya said. "The same actor controls
The Hacker News

INC

Dark Feed IO
2 months ago

You must login to view this content

cohenido

Reddit 开始要求访问成人内容的英国用户验证年龄

Solidot
2 months ago
Reddit 宣布，为了遵守英国的新法律 Online Safety Act，它开始要求访问成人内容的英国用户验证年龄。Reddit 是通过第三方服务 Persona 验证用户年龄，Persona 会对用户上传的自拍照或政府颁发的身份证件照片进行验证。Reddit 不会储存用户上传的照片，只会储存验证状态和用户提供的出生日期，用户无需在每次访问成人内容时进行验证。Reddit 称，Persona 承诺保护数据隐私，承诺不会将照片保留超过 7 天，它也无法访问用户的 Reddit 数据。

Managed ad