Aggregator

CVE-2025-10472 | harry0703 MoneyPrinterTurbo up to 1.2.6 URL video.py download_video/stream_video file_path path traversal

VulDB Recent Entries
3 months ago
A vulnerability, which was classified as critical, has been found in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function download_video/stream_video of the file app/controllers/v1/video.py of the component URL Handler. The manipulation of the argument file_path leads to path traversal. This vulnerability is documented as CVE-2025-10472. The attack can be initiated remotely. Additionally, an exploit exists.
vuldb.com

Hackers using generative AI “ChatGPT” to evade anti-virus defenses

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
3 months ago

The Kimsuky APT group has begun leveraging generative AI ChatGPT to craft deepfake South Korean military agency ID cards. Phishing lures deliver batch files and AutoIt scripts designed to evade anti-virus scanning through sophisticated obfuscation. Organizations must deploy endpoint detection and response (EDR) solutions to unmask hidden scripts and secure endpoints. On July 17, 2025, […]

The post Hackers using generative AI “ChatGPT” to evade anti-virus defenses appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

CVE-2025-41713 | WAGO Devices Configuration insecure default initialization of resource (VDE-2025-083 / EUVD-2025-29160)

VulDB Recent Entries
3 months ago
A vulnerability classified as problematic was found in WAGO Devices. The affected element is an unknown function of the component Configuration Handler. Executing manipulation can lead to insecure default initialization of resource. This vulnerability is registered as CVE-2025-41713. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2025-10471 | ZKEACMS 4.3 MediaController.cs Proxy url server-side request forgery

VulDB Recent Entries
3 months ago
A vulnerability classified as critical has been found in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaController.cs. Performing manipulation of the argument url results in server-side request forgery. This vulnerability is cataloged as CVE-2025-10471. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad