Russian-speaking hacker group disrupted by local researchers
Russian cybersecurity researchers identified and dismantled a network of domains operated by the hacker group NyashTeam.
Aggregator
CVE-2025-34141 | ETQ Reliance CG 2025.1.2/MP-4583 SQLConverterServlet cross site scripting
4 months 3 weeks ago
A vulnerability was found in ETQ Reliance CG 2025.1.2/MP-4583. It has been classified as problematic. Affected is an unknown function of the component SQLConverterServlet. The manipulation leads to cross site scripting.
This vulnerability is traded as CVE-2025-34141. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-34142 | ETQ Reliance CG prior 2025.1.2/SE.2025.1 SAML Authentication /resources/sessions/sso xml external entity reference
4 months 3 weeks ago
A vulnerability was found in ETQ Reliance CG and classified as problematic. This issue affects some unknown processing of the file /resources/sessions/sso of the component SAML Authentication. The manipulation leads to xml external entity reference.
The identification of this vulnerability is CVE-2025-34142. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2015-10140 | Darren Cooney Ajax Load More Plugin prior 2.8.1.2 on WordPress authorization
4 months 3 weeks ago
A vulnerability has been found in Darren Cooney Ajax Load More Plugin on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to missing authorization.
This vulnerability was named CVE-2015-10140. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-51867 | Deepfiction AI up to 20250603 Credit /browse/stories resource injection
4 months 3 weeks ago
A vulnerability, which was classified as problematic, was found in Deepfiction AI up to 20250603. This affects an unknown part of the file /browse/stories of the component Credit Handler. The manipulation leads to improper control of resource identifiers.
This vulnerability is uniquely identified as CVE-2025-51867. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2025-7705 | ABB Switch Actuator 4 DU-83330 debug code
4 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in ABB Switch Actuator 4 DU-83330. Affected by this issue is some unknown functionality. The manipulation leads to active debug code.
This vulnerability is handled as CVE-2025-7705. It is possible to launch the attack on the physical device. There is no exploit available.
vuldb.com
CVE-2025-51865 | Ai2 Playground Web Service LLM Chat up to 2025-06-03 Object Reference thread resource injection (EUVD-2025-22315)
4 months 3 weeks ago
A vulnerability classified as problematic was found in Ai2 Playground Web Service LLM Chat up to 2025-06-03. Affected by this vulnerability is an unknown functionality of the component Object Reference Handler. The manipulation of the argument thread leads to improper control of resource identifiers.
This vulnerability is known as CVE-2025-51865. The attack can be launched remotely. There is no exploit available.
vuldb.com
CVE-2025-34140 | ETQ Reliance CG/Reliance NXG prior 2025.1.2/SE.2025.1 API Endpoint authorization
4 months 3 weeks ago
A vulnerability classified as problematic has been found in ETQ Reliance CG and Reliance NXG. Affected is an unknown function of the component API Endpoint. The manipulation leads to authorization bypass.
This vulnerability is traded as CVE-2025-34140. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-34143 | ETQ Reliance CG prior MP-4583 Username authentication bypass
4 months 3 weeks ago
A vulnerability was found in ETQ Reliance CG. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument Username leads to authentication bypass using alternate channel.
The identification of this vulnerability is CVE-2025-34143. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
Система готова к бегству: Microsoft добавила «чемоданный режим» для перехода с Windows 10
4 months 3 weeks ago
Windows 11 теперь сам встречает вас у порога.
Akira
4 months 3 weeks ago
You must login to view this content
cohenido
Akira
4 months 3 weeks ago
You must login to view this content
cohenido
Threat Actors Allegedly Selling macOS 0-day LPE Exploit on Hacker Forums
4 months 3 weeks ago
A threat actor known as “skart7” is allegedly offering a zero-day Local Privilege Escalation (LPE) exploit targeting Apple’s macOS operating system for sale on a prominent hacker forum. This development represents a significant security concern for macOS users, particularly those in enterprise environments and high-value target organizations. Key Takeaways1. Threat actor "skart7" allegedly selling macOS […]
The post Threat Actors Allegedly Selling macOS 0-day LPE Exploit on Hacker Forums appeared first on Cyber Security News.
Guru Baran
Arcus Media
4 months 3 weeks ago
You must login to view this content
cohenido
Qilin
4 months 3 weeks ago
You must login to view this content
cohenido
Qilin
4 months 3 weeks ago
You must login to view this content
cohenido
Qilin
4 months 3 weeks ago
You must login to view this content
cohenido
Qilin
4 months 3 weeks ago
You must login to view this content
cohenido
Arcus Media
4 months 3 weeks ago
You must login to view this content
cohenido
Cisco: Maximum-severity ISE RCE flaws now exploited in attacks
4 months 3 weeks ago
Cisco is warning that three recently patched critical remote code execution vulnerabilities in Cisco Identity Services Engine (ISE) are now being actively exploited in attacks. [...]
Bill Toulas