Aggregator

CVE-2025-4295 | HotelRunner B2B up to 03.06.2025 Host certificate validation

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in HotelRunner B2B up to 03.06.2025. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument Host leads to certificate with host mismatch. This vulnerability is known as CVE-2025-4295. The attack can be launched remotely. There is no exploit available. This product is available as a managed service. Users are not able to maintain vulnerability countermeasures themselves.
vuldb.com

CVE-2025-4294 | HotelRunner B2B up to 03.06.2025 cross site scripting

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in HotelRunner B2B up to 03.06.2025. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-4294. The attack may be launched remotely. There is no exploit available. This product is a managed service. It is not possible for users to maintain vulnerability countermeasures themselves.
vuldb.com

Clorox Sues Cognizant for $380M, Alleges Gross Negligence Led to Devastating Cyberattack

Penetration Testing Tools - Metepreter.org
4 months 3 weeks ago

Clorox has filed a lawsuit against the global IT services provider Cognizant, accusing the company of gross negligence that allegedly led to a devastating cyberattack in August 2023. According to the complaint, Cognizant—tasked with...

The post Clorox Sues Cognizant for $380M, Alleges Gross Negligence Led to Devastating Cyberattack appeared first on Penetration Testing Tools.

ddos

Amazon Q Pulled After Malicious Pull Request Instructs AI to Delete User Files and AWS Resources

Penetration Testing Tools - Metepreter.org
4 months 3 weeks ago

Amazon was forced to urgently withdraw a compromised version of its AI-powered programming assistant, Q, after a malicious instruction was covertly embedded into the system. This rogue directive prompted the assistant to exploit command-line...

The post Amazon Q Pulled After Malicious Pull Request Instructs AI to Delete User Files and AWS Resources appeared first on Penetration Testing Tools.

ddos

Mimo Strikes Magento & Docker: Evolved Cybercrime Group Unleashes Stealthy Cryptojacking & Proxyjacking

Penetration Testing Tools - Metepreter.org
4 months 3 weeks ago

The cybercriminal group known as Mimo, previously recognized for its campaigns deploying cryptocurrency miners, has shifted its tactics, now targeting new vectors — notably the popular e-commerce platform Magento and misconfigured Docker instances. The...

The post Mimo Strikes Magento & Docker: Evolved Cybercrime Group Unleashes Stealthy Cryptojacking & Proxyjacking appeared first on Penetration Testing Tools.

ddos

CVE-2025-53770

不安全
4 months 3 weeks ago
Microsoft SharePoint存在远程代码执行漏洞（CVE-2025-53770），可绕过先前补丁，允许攻击者在本地服务器上执行任意代码，控制受影响系统并造成严重安全风险。建议升级至最新版本以修复漏洞。

Android Malware: New Campaign Blends Click Fraud & Credential Theft via Fake Apps

Penetration Testing Tools - Metepreter.org
4 months 3 weeks ago

Amid the growing popularity of Android smartphones in developing regions and the increasing accessibility of third-party app stores, cybercriminals have launched a large-scale campaign that combines two highly dangerous tactics—credential theft and click fraud—for...

The post Android Malware: New Campaign Blends Click Fraud & Credential Theft via Fake Apps appeared first on Penetration Testing Tools.

ddos

Managed ad