Aggregator

CVE-2025-8942 | ThimPress WP Hotel Booking Plugin up to 2.2.2 on WordPress rating access control (EUVD-2025-29843)

4 months 3 weeks ago

A vulnerability described as critical has been identified in ThimPress WP Hotel Booking Plugin up to 2.2.2 on WordPress. Affected by this issue is some unknown functionality. The manipulation of the argument rating results in improper access controls. This vulnerability was named CVE-2025-8942. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

vuldb.com

CVE-2025-5305 | Password Reset with Code REST API Plugin up to 0.0.16 on WordPress inadequate encryption (EUVD-2025-29845)

Vuldb Updates

4 months 3 weeks ago

A vulnerability classified as problematic has been found in Password Reset with Code REST API Plugin up to 0.0.16 on WordPress. This affects an unknown part. This manipulation causes inadequate encryption strength. The identification of this vulnerability is CVE-2025-5305. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

vuldb.com

CVE-2024-42032 | Huawei HarmonyOS/EMUI Contacts information disclosure (EUVD-2024-39408)

Vuldb Updates

4 months 3 weeks ago

A vulnerability marked as problematic has been reported in Huawei HarmonyOS and EMUI. Affected by this vulnerability is an unknown functionality of the component Contacts Module. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2024-42032. Local access is required to approach this attack. No exploit exists.

vuldb.com

Sinobi

Dark Feed IO

4 months 3 weeks ago

You must login to view this content

cohenido

SonicWall Breached, Firewall Backup Data Exposed

darkreading

4 months 3 weeks ago

Threat actors breached the MySonicWall service and accessed backup firewall configuration files belonging to "fewer than 5%" of its install base, according to the company.

Alexander Culafi

How to Radically Cut Response Time for Each Security Incident

Cyber Security News

4 months 3 weeks ago

When an incident happens, there’s no time to waste. SOC teams must react fast to protect their organization, and this requires more than expertise. Strong solutions tailored to the needs of businesses can make all the difference. The secret to radically cutting response time for incidents lies in equipping your SOC team with an enterprise-grade […]

The post How to Radically Cut Response Time for Each Security Incident appeared first on Cyber Security News.

Balaji N

WorldLeaks

Dark Feed IO

4 months 3 weeks ago

You must login to view this content

cohenido

WorldLeaks

Dark Feed IO

4 months 3 weeks ago

You must login to view this content

cohenido

WorldLeaks

Dark Feed IO

4 months 3 weeks ago

You must login to view this content

cohenido

Phishing Attack

Security Boulevard

4 months 3 weeks ago

Phishing remains one of the most successful cyberattack techniques today. Despite decades of awareness campaigns, it continues to deceive individuals and organizations into giving away sensitive information, from login credentials to financial details. Why? Because phishing exploits the human element, which is often the weakest link in cybersecurity. Phishing attacks are evolving in sophistication, scale,

The post Phishing Attack appeared first on Seceon Inc.

The post Phishing Attack appeared first on Security Boulevard.

Pushpendra Mishra

DEF CON 33: AIxCC With ShellPhish

Security Boulevard

4 months 3 weeks ago

Creators, Authors and Presenters: Silk Interviews Members ShellPhish

Our sincere appreciation to DEF CON, and the Creators/Presenters/Authors for publishing their timely DEF CON 33 outstanding content. Originating from the conference's events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 33: AIxCC With ShellPhish appeared first on Security Boulevard.

Marc Handelman