Aggregator

CVE-2025-4535 | Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0 Configuration File config.properties information disclosure

Vuldb Updates
4 months 1 week ago
A vulnerability, which was classified as problematic, was found in Gosuncn Technology Group Audio-Visual Integrated Management Platform 4.0. Affected is an unknown function of the file /config/config.properties of the component Configuration File Handler. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2025-4535. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2024-11477

CVE Trends
4 months 1 week ago
Currently trending CVE - Hype Score: 10 - 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack ...

Week in review: The impact of a CVE-free future on cyber defense, Patch Tuesday forecast

Help Net Security
4 months 1 week ago

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What a future without CVEs means for cyber defense For many cybersecurity professionals, the CVE program is the foundation for hands-on cybersecurity practice and crucial benchmarking of security preparedness. May 2025 Patch Tuesday forecast: Panic, change, and hope A bit of chaos ensued in the following weeks with the announcement that MITRE would no longer be supporting the CVE Program … More →

The post Week in review: The impact of a CVE-free future on cyber defense, Patch Tuesday forecast appeared first on Help Net Security.

Help Net Security

CVE-2025-47817 | BlueWave Checkmate up to 2.0.2 Profile Edit Request role external control of assumed-immutable web parameter (GHSA-rq7r-p9cq-5q4f)

VulDB Recent Entries
4 months 1 week ago
A vulnerability, which was classified as very critical, has been found in BlueWave Checkmate up to 2.0.2. Affected by this issue is some unknown functionality of the component Profile Edit Request Handler. The manipulation of the argument role leads to external control of assumed-immutable web parameter. This vulnerability is handled as CVE-2025-47817. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

Managed ad