Aggregator

A vulnerability labeled as critical has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address Handler. Executing manipulation of the argument id/email can lead to improper authorization. This vulnerability appears as CVE-2025-10014. The attack may be performed from remote. In addition, an exploit is available. It is required to know the RSA-encrypted password of the attacked user account.

根据发表在《Neurology》期刊上的一项研究，人工甜味剂如阿斯巴甜、糖精和糖醇可能会加速中年人的认知能力下降，相当于额外衰老 1.6 年。研究人员建议消费者改用天然甜味剂如塔格糖（tagatose），或蜂蜜、枫糖浆等替代品。研究人员调查了 7 种人工甜味剂对平均年龄 52 岁的 12,772 名巴西公务员的健康影响，平均随访时间 八年。参与者完成了详细记录过去一年食物和饮料摄入量的问卷，接受了认知能力测试如语言流畅性和词汇回忆。结果显示，人工甜味剂摄入最多的人的思维和记忆能力下降速度比摄入最少的人快 62%。研究人员表示，这相当于衰老了约 1.6 年。这种趋势仅在 60 岁以下的参与者中观察到。研究人员认为需要鼓励中年人减少使用人工甜味剂。

SAP Threat Modeling Tool This tool helps you analyze and visualize connections between your SAP systems, enabling identification

The post SAP Threat Modeling Tool: A New Open-Source Tool to Protect SAP Systems from Attack appeared first on Penetration Testing Tools.

Sitecore с «демо-ключом» оказался лёгкой добычей.

Submit #643840 / VDB-322739

一位24岁的计算机工程毕业生通过自学掌握HTML、CSS、JS、Dart等技能，并获得CCNA、MTCNA等认证。他在职业选择上感到困惑：曾学习网络工程但缺乏热情；转向网络安全领域但担心入门难度高；受AI淘汰入门职位传言影响而迷茫。

A vulnerability identified as critical has been detected in Portabilis i-Educar up to 2.10. This affects an unknown function of the file /exportacao-para-o-seb. Performing manipulation results in improper access controls. This vulnerability is reported as CVE-2025-10013. The attack is possible to be carried out remotely. Moreover, an exploit is present.

As the attack surface expands and the threat landscape grows more complex, it’s time to consider whether your data protection strategy is fit for purpose

A vulnerability categorized as critical has been discovered in Portabilis i-Educar up to 2.10. The impacted element is an unknown function of the file educar_historico_escolar_lst.php. Such manipulation of the argument ref_cod_aluno leads to sql injection. This vulnerability is documented as CVE-2025-10012. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability was found in Portabilis i-Educar up to 2.10. It has been rated as critical. The affected element is an unknown function of the file /module/TabelaArredondamento/edit. This manipulation of the argument ID causes sql injection. This vulnerability is registered as CVE-2025-10011. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

Submit #643575 / VDB-322061

Submit #643567 / VDB-322738

Submit #643549 / VDB-322737

Submit #643544 / VDB-322736

A sophisticated North Korean cyber operation has been exposed, revealing how state-sponsored hackers systematically monitor cybersecurity intelligence platforms to detect when their malicious infrastructure is discovered and rapidly deploy replacement assets to maintain operations. The analysis, conducted by SentinelLABS in collaboration with Validin, provides unprecedented insight into the operational practices of threat actors behind the […]

The post North Korean Hackers Expose Their Playbook for Swapping Infrastructure appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Cybercriminals are increasingly exploiting the trust organizations place in artificial intelligence platforms to conduct sophisticated phishing attacks, according to a new report from cybersecurity firm Cato Networks. The company’s Managed Detection and Response (MDR) service recently uncovered a campaign where threat actors leveraged Simplified AI, a popular marketing platform, to steal Microsoft 365 credentials from […]

The post Hackers Use AI Platforms to Steal Microsoft 365 Credentials in Phishing Campaign appeared first on Cyber Security News.

A vulnerability was found in Huawei HarmonyOS 5.0.1/5.1.0. It has been declared as critical. Impacted is an unknown function of the component Audio Module. The manipulation results in race condition. This vulnerability is cataloged as CVE-2025-58296. The attack must be initiated from a local position. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS 5.0.1/5.1.0. It has been classified as critical. This issue affects some unknown processing of the component Runtime Interpreter Module. The manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2025-58281. The attack must be carried out locally. There is no available exploit.

A vulnerability was found in Huawei HarmonyOS 5.0.1/5.1.0 and classified as critical. This vulnerability affects unknown code of the component Ark eTS Module. Executing manipulation can lead to improperly controlled modification of object prototype attributes ('prototype pollution'). This vulnerability is tracked as CVE-2025-58280. The attack is restricted to local execution. No exploit exists.

A vulnerability has been found in Huawei HarmonyOS and EMUI and classified as critical. This affects an unknown part of the component Home Screen Module. Performing manipulation results in improper access controls. This vulnerability is identified as CVE-2025-58276. The attack is only possible with local access. There is not any exploit available.