Aggregator

CVE-2025-46702 | Mattermost up to 9.11.15/10.5.5/10.6.5/10.7.2/10.8.0 Private Channel authorization (EUVD-2025-19559)

VulDB Recent Entries
5 months 2 weeks ago
A vulnerability has been found in Mattermost up to 9.11.15/10.5.5/10.6.5/10.7.2/10.8.0 and classified as critical. This vulnerability affects unknown code of the component Private Channel Handler. The manipulation leads to incorrect authorization. This vulnerability was named CVE-2025-46702. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Akira

Dark Feed IO
5 months 2 weeks ago

You must login to view this content

cohenido

Senator Chides FBI for Weak Advice on Mobile Security

Krebs on Security
5 months 2 weeks ago
Agents with the Federal Bureau of Investigation (FBI) briefed Capitol Hill staff recently on hardening the security of their mobile devices, after a contacts list stolen from the personal phone of the White House Chief of Staff Susie Wiles was reportedly used to fuel a series of text messages and phone calls impersonating her to U.S. lawmakers. But in a letter this week to the FBI, one of the Senate's most tech-savvy lawmakers says the feds aren't doing enough to recommend more appropriate security protections that are already built into most consumer mobile devices.
BrianKrebs

CVE-2025-52919 | Yealink YMCS RPS prior 2025-05-26 Certificate Upload certificate validation (EUVD-2025-18886)

Vuldb Updates
5 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in Yealink YMCS RPS. This issue affects some unknown processing of the component Certificate Upload. The manipulation leads to improper certificate validation. The identification of this vulnerability is CVE-2025-52919. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-45851 | Hikvision DS-2CD1321-I 5.7.21 Build 230819 challenge denial of service (EUVD-2025-19428)

Vuldb Updates
5 months 2 weeks ago
A vulnerability was found in Hikvision DS-2CD1321-I 5.7.21 Build 230819. It has been classified as problematic. This affects an unknown part of the file /ISAPI/Security/challenge. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2025-45851. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-6827 | code-projects Inventory Management System 1.0 editOrder.php sql injection (EUVD-2025-19460)

Vuldb Updates
5 months 2 weeks ago
A vulnerability, which was classified as critical, was found in code-projects Inventory Management System 1.0. This affects an unknown part of the file /php_action/editOrder.php. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2025-6827. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-6828 | code-projects Inventory Management System 1.0 /orders.php i sql injection (EUVD-2025-19464)

Vuldb Updates
5 months 2 weeks ago
A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /orders.php. The manipulation of the argument i leads to sql injection. This vulnerability was named CVE-2025-6828. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-6829 | aaluoxiang oa_system up to c3a08168c144f27256a90838492c713f55f1b207 External Address Book outAddress sql injection (EUVD-2025-19462)

Vuldb Updates
5 months 2 weeks ago
A vulnerability was found in aaluoxiang oa_system up to c3a08168c144f27256a90838492c713f55f1b207 and classified as critical. This issue affects the function outAddress of the component External Address Book Handler. The manipulation leads to sql injection. The identification of this vulnerability is CVE-2025-6829. The attack may be initiated remotely. There is no exploit available. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
vuldb.com

CVE-2025-6834 | code-projects Inventory Management System 1.0 editPayment.php orderId sql injection (EUVD-2025-19466)

Vuldb Updates
5 months 2 weeks ago
A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /php_action/editPayment.php. The manipulation of the argument orderId leads to sql injection. This vulnerability was named CVE-2025-6834. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-6843 | code-projects Simple Photo Gallery 1.0 /upload-photo.php file_img unrestricted upload (EUVD-2025-19471)

Vuldb Updates
5 months 2 weeks ago
A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been classified as critical. Affected is an unknown function of the file /upload-photo.php. The manipulation of the argument file_img leads to unrestricted upload. This vulnerability is traded as CVE-2025-6843. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-6844 | code-projects Simple Forum 1.0 /signin.php User sql injection (EUVD-2025-19470)

Vuldb Updates
5 months 2 weeks ago
A vulnerability was found in code-projects Simple Forum 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /signin.php. The manipulation of the argument User leads to sql injection. This vulnerability is known as CVE-2025-6844. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2024-20258 | Cisco Secure Email cross site scripting (cisco-sa-esa-sma-wsa-xss-bgG5WHOD)

Vuldb Updates
5 months 2 weeks ago
A vulnerability, which was classified as problematic, was found in Cisco Secure Email, Web Manager, Secure Email Gateway and Secure Web Appliance. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-20258. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Dell’s Comprehensive Approach to AI and the Dell AI Factory

Security Boulevard
5 months 2 weeks ago

Artificial intelligence (AI) is disrupting every industry, promising unprecedented innovation and efficiency. But that power requires responsibility, especially in the realm of cybersecurity. As businesses race to adopt AI, the question isn’t just how to implement it, but how to implement it securely. Dell Technologies is at the forefront of this challenge, championing a proactive..

The post Dell’s Comprehensive Approach to AI and the Dell AI Factory appeared first on Security Boulevard.

Tom Hollingsworth

Managed ad