Aggregator

CVE-2025-10273 | erjinzhi 10OA 1.0 /view/file.aspx File path traversal

VulDB Recent Entries
4 weeks 1 day ago
A vulnerability was found in erjinzhi 10OA 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /view/file.aspx. Such manipulation of the argument File leads to path traversal. This vulnerability is uniquely identified as CVE-2025-10273. The attack can only be initiated within the local network. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-10272 | erjinzhi 10OA 1.0 /trial/mvc/catalogue Name cross site scripting

VulDB Recent Entries
4 weeks 1 day ago
A vulnerability has been found in erjinzhi 10OA 1.0 and classified as problematic. Affected is an unknown function of the file /trial/mvc/catalogue. This manipulation of the argument Name causes cross site scripting. This vulnerability is handled as CVE-2025-10272. The attack can be initiated remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-10271 | erjinzhi 10OA 1.0 /trial/mvc/finder Name cross site scripting

VulDB Recent Entries
4 weeks 1 day ago
A vulnerability, which was classified as problematic, was found in erjinzhi 10OA 1.0. This impacts an unknown function of the file /trial/mvc/finder. The manipulation of the argument Name results in cross site scripting. This vulnerability is known as CVE-2025-10271. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Why Cyber Resilience Starts With People, Not Just Tools

Security Boulevard
4 weeks 1 day ago

Fletcher Heisler, CEO of Authentik Security, covers the evolution of Identity and Access Management (IAM) and its significance in modern security. Fletcher also emphasizes a careful approach to AI integration, prioritizing human coding. Heisler, who has been working in tech since his early days experimenting with security in less-than-sanctioned ways, shares his journey into the..

The post Why Cyber Resilience Starts With People, Not Just Tools appeared first on Security Boulevard.

Alan Shimel

L7 DDoS Botnet Hijacked 5.76M Devices to Launch Massive Attacks

Cyber Security News
4 weeks 1 day ago

In early March 2025, security teams first observed an unprecedented L7 DDoS botnet targeting web applications across multiple sectors. The botnet, rapidly expanding from an initial 1.33 million compromised devices, employed HTTP GET floods to exhaust server resources and circumvent traditional rate limiting. By mid-May, the threat escalated as the botnet grew to 4.6 million […]

The post L7 DDoS Botnet Hijacked 5.76M Devices to Launch Massive Attacks appeared first on Cyber Security News.

Tushar Subhra Dutta

VDB-323639 | Amazon AWS Bucket Monopoly code injection

VulDB Recent Entries
4 weeks 1 day ago
A vulnerability classified as critical was found in Amazon AWS. The impacted element is an unknown function. Executing manipulation can lead to code injection. The attack may be performed from remote. There is no available exploit. This product is a managed service. This means that users are not able to maintain vulnerability countermeasures themselves.
vuldb.com

Managed ad