Aggregator

CVE-2025-58745 | LabRedesCefetRJ WeGIA up to 3.4.10 PHP File controla_xlsx.php code injection (GHSA-hq96-gvmx-qrwp)

Vuldb Updates
3 weeks 5 days ago
A vulnerability was found in LabRedesCefetRJ WeGIA up to 3.4.10. It has been declared as critical. Affected by this issue is some unknown functionality of the file /html/socio/sistema/controller/controla_xlsx.php of the component PHP File Handler. Such manipulation leads to code injection. This vulnerability is documented as CVE-2025-58745. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2025-58454 | LabRedesCefetRJ WeGIA up to 3.4.10 listar_despachos.php id_memorando sql injection (GHSA-ghfh-g6rg-jmqf)

Vuldb Updates
3 weeks 5 days ago
A vulnerability labeled as critical has been found in LabRedesCefetRJ WeGIA up to 3.4.10. Impacted is an unknown function of the file /WeGIA/html/memorando/listar_despachos.php. The manipulation of the argument id_memorando results in sql injection. This vulnerability is known as CVE-2025-58454. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.
vuldb.com

CVE-2025-58453 | LabRedesCefetRJ WeGIA up to 3.4.10 exibe_anexo.php id_anexo sql injection (GHSA-gg48-pg9f-39fx)

Vuldb Updates
3 weeks 5 days ago
A vulnerability marked as critical has been reported in LabRedesCefetRJ WeGIA up to 3.4.10. The affected element is an unknown function of the file /WeGIA/html/memorando/exibe_anexo.php. This manipulation of the argument id_anexo causes sql injection. This vulnerability is handled as CVE-2025-58453. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-58452 | LabRedesCefetRJ WeGIA up to 3.4.10 listar_despachos.php id_memorando cross site scripting (GHSA-hq9x-mfv2-x467)

Vuldb Updates
3 weeks 5 days ago
A vulnerability categorized as problematic has been discovered in LabRedesCefetRJ WeGIA up to 3.4.10. The affected element is an unknown function of the file listar_despachos.php. The manipulation of the argument id_memorando results in cross site scripting. This vulnerability is reported as CVE-2025-58452. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.
vuldb.com

CS免杀如何从0到1

先知技术社区
3 weeks 5 days ago
CS免杀如何从0到1Loader｜Shellcode 介绍看了网上很多的免杀基本都是由 loader+shellcode 组成，这种免杀也比较简单，写个能免杀的 loader 然后对 shellcode 进行各种加密隐藏通过 loader 读取解密执行就行了。shellcode 就是一段用于执行特定功能的机器码，一般是我们的恶意命令，也可以是上线 cs 的命令。而 loader 加载器的核心步骤通

Managed ad