Aggregator

A vulnerability, which was classified as problematic, was found in TP-LINK TL-WR841ND. This affects an unknown part of the file /userRpm/WlanSecurityRpm.htm of the component Packet Handler. The manipulation of the argument pskSecret leads to denial of service. This vulnerability is uniquely identified as CVE-2025-25898. The attack needs to be approached within the local network. There is no exploit available.

A vulnerability, which was classified as critical, has been found in whisperfish libsignal-service-rs. Affected by this issue is some unknown functionality. The manipulation of the argument was_encrypted leads to improper authentication. This vulnerability is handled as CVE-2025-24904. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in PHPGurukul Land Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/bwdates-reports-details.php of the component POST Request Parameter Handler. The manipulation of the argument todate leads to sql injection. This vulnerability is known as CVE-2025-25356. The attack can be launched remotely. There is no exploit available.

The life of a Security Operations Center (SOC) analyst is often compared to navigating a vast and dangerous ocean. While tools like Intrusion Detection Systems (IDS), Cloud-Native Application Protection Platforms (CNAPP), and Endpoint Detection and Response (EDR) provide visibility into many attack vectors, a critical blindspot remains: the application layer. This gap leaves SOC teams feeling like they're sailing blindfolded, vulnerable to unseen threats lurking beneath the surface. 

The post Application Detection and Response (ADR) Gives the SOC Deep Visibility into the Application Layer | Contrast Security appeared first on Security Boulevard.

A vulnerability was found in TP-LINK TL-WR841ND V11. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /userRpm/PPPoEv6CfgRpm.htm. The manipulation leads to denial of service. This vulnerability is known as CVE-2025-25900. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability classified as critical has been found in Instaclustr Cassandra-Lucene-Index plugin up to 4.0.16-1.0.0/4.1.8-1.0.0. Affected is an unknown function of the component RBAC. The manipulation leads to authentication bypass using alternate channel. This vulnerability is traded as CVE-2025-26511. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in lakejason0 mediawiki-skins-Lakeus up to 1.3.1/1.4.0/1.8.0/1.39/1.42 on MediaWiki. It has been classified as problematic. Affected is an unknown function of the file themeDesigner.js of the component System Message Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-25287. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in PHPGurukul Land Record System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/bwdates-reports-details.php of the component POST Request Parameter Handler. The manipulation leads to sql injection. The identification of this vulnerability is CVE-2025-25355. The attack may be initiated remotely. There is no exploit available.

探索AI驱动的代码审计：设计方案

探索AI驱动的代码审计：设计方案

探索AI驱动的代码审计：设计方案

探索AI驱动的代码审计：设计方案

rufusdomando Claims to have Leaked the Data of Swiss Medical

For years, Avast Decoded has been your go-to for the latest in cybersecurity insights and research. But as cybercriminals evolve, so do we. Starting now, our groundbreaking research, expert analysis and the stories that keep the digital world safe are moving to one place: the Gen Insights Blog. By uniting our expertise under the Gen […]

The post Out with the Old, In with the Bold: Gen Threat Labs appeared first on Avast Threat Labs.

用DeepSeek训练私有数据 by ourren

如何利用deepseek开展网络安全攻防对抗 by ourren

2024年全球高级持续性威胁（APT）研究报告 by ourren

2024年度网络安全漏洞分析报告 by ourren

大模型用于代码扫描 by ourren

Tor隐藏服务指纹识别技术分析 by ourren

更多最新文章，请访问SecWiki

A vulnerability classified as problematic was found in Breadcrumbs2 Extension up to 1.39.10/1.41.4/1.42.3 on Mediawiki. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-23078. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in ArticleFeedbackv5 Extension up to 1.39.10/1.41.2/1.42.1 on Mediawiki. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-23079. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Microweber 2.0.9 and classified as problematic. This issue affects some unknown processing of the file /admin/module/view?type=admin__backup. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-33298. The attack may be initiated remotely. There is no exploit available.