Aggregator

A vulnerability, which was classified as critical, was found in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. This vulnerability was named CVE-2025-9937. The attack may be performed from remote. In addition, an exploit is available. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

In January 2025, cybersecurity experts at Wiz Research found that Chinese AI specialist DeepSeek had suffered a data leak, putting more than 1 million sensitive log streams at risk. According to the Wiz Research team, they identified a publicly accessible ClickHouse database belonging to DeepSeek. This allowed “full control over database operations, including the ability to access

A vulnerability, which was classified as critical, has been found in fuyang_lipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2025-9936. The attack is possible to be carried out remotely. Moreover, an exploit is present. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Submit #643446 / VDB-322340

Submit #643392 / VDB-322339

A vulnerability classified as critical was found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-bin/cstecgi.cgi. Executing manipulation can lead to command injection. This vulnerability is handled as CVE-2025-9935. The attack can be executed remotely. Additionally, an exploit exists. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Submit #643388 / VDB-322338

A vulnerability classified as critical has been found in TOTOLINK X5000R 9.1.0cu.2415_B20250515. This affects the function sub_410C34 of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument pid results in command injection. This vulnerability is known as CVE-2025-9934. Remote exploitation of the attack is possible. Furthermore, an exploit is available. Once again VulDB remains the best source for vulnerability data.

Submit #643263 / VDB-260480

A vulnerability described as critical has been identified in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. Such manipulation of the argument viewid leads to sql injection. This vulnerability is traded as CVE-2025-9933. The attack may be launched remotely. Furthermore, there is an exploit available. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Submit #643108 / VDB-289661

A vulnerability marked as critical has been reported in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. This vulnerability appears as CVE-2025-9932. The attack may be initiated remotely. In addition, an exploit is available. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Submit #643088 / VDB-322337

Чтобы избежать утечек, Еврокомиссия решила просто ничего не сохранять.

A vulnerability labeled as problematic has been found in Jinher OA 1.0. Affected is an unknown function of the file /jc6/platform/sys/login!changePassWord.action of the component POST Request Handler. The manipulation of the argument Account results in cross site scripting. This vulnerability is reported as CVE-2025-9931. The attack can be launched remotely. Moreover, an exploit is present. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

The U.S. District Court for the District of Columbia today imposed landmark remedies in the Justice Department’s monopolization case against Google, ordering the tech giant to share critical search data with competitors and outlawing exclusive distribution agreements for its flagship products. The ruling stops short of forcing Google to divest its Chrome browser but mandates […]

The post Google Avoids Chrome Breakup but Must Share Search Data With Competitors appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #643048 / VDB-322336

A vulnerability identified as critical has been detected in 1000projects Beauty Parlour Management System 1.0. This impacts an unknown function of the file /admin/contact-us.php. The manipulation of the argument mobnumber leads to sql injection. This vulnerability is documented as CVE-2025-9930. The attack can be initiated remotely. Additionally, an exploit exists. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Submit #643038 / VDB-322335

Submit #643034 / VDB-322334