PT-2025-10126

Name of the Vulnerable Software and Affected Versions Backdrop CMS Masquerade module versions prior to 1.x-1.0.1 Description An issue in the Masquerade module allows users to temporarily switch to another user account, potentially bypassing the "Masquerade as admin" permission. This permission is...

CVE-2025-27822

An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows people to temporarily switch to another user account. The module provides a "Masquerade as admin" permission to restrict people who can masquerade from switching to an account with administrative...

CVE-2025-25280

Buffer overflow vulnerability exists in FutureNet AS series Industrial Routers and FA series Protocol Conversion Machine provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request...

CVE-2025-24846

Authentication bypass vulnerability exists in FutureNet AS series Industrial Routers provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request...

Vasion Print 安全漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. Vasion Print has a security vulnerability that stems from the use of hard-coded passwords...

Vasion Print 跨站请求伪造漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print that stems from inadequate CSRF protection...

Vasion Print 跨站脚本漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print. An attacker could execute a cross-site scripting attack by exploiting the vulnerability...

The New Ransomware Groups Shaking Up 2025

In 2024, global ransomware attacks hit 5,414, an 11% increase from 2023. After a slow start, attacks spiked in Q2 and surged in Q4, with 1,827 incidents 33% of the year's total. Law enforcement actions against major groups like LockBit caused fragmentation, leading to more competition and a rise ...

CVE-2025-24846

Authentication bypass vulnerability exists in FutureNet AS series Industrial Routers provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request...

CVE-2025-25280

Buffer overflow vulnerability exists in FutureNet AS series Industrial Routers and FA series Protocol Conversion Machine provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request...

CVE-2025-24846

The CVE-2025-24846 entry describes an authentication bypass in Century Systems’ FutureNet AS series Industrial Routers (CWE-288). An unauthenticated, remote attacker could obtain device information such as MAC addresses by sending a specially crafted request. Connected sources (JVN/JPCERT, Red Ha...

CVE-2025-24846

Authentication bypass vulnerability exists in FutureNet AS series Industrial Routers provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request...

CVE-2025-24846

Authentication bypass vulnerability exists in FutureNet AS series Industrial Routers provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request...

PT-2025-9288

Name of the Vulnerable Software and Affected Versions FutureNet AS series Industrial Routers and FA series Protocol Conversion Machine affected versions not specified Description A buffer overflow issue exists, allowing a remote unauthenticated attacker to reboot the device by sending a specially...

CVE-2025-25280: Buffer Copy without Checking Size of Input

Buffer overflow vulnerability exists in FutureNet AS series Industrial Routers and FA series Protocol Conversion Machine provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request...

CVE-2025-24846: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass vulnerability exists in FutureNet AS series Industrial Routers provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request...

PT-2025-9287

Name of the Vulnerable Software and Affected Versions FutureNet AS series Industrial Routers affected versions not specified Description An authentication bypass issue exists, allowing a remote unauthenticated attacker to obtain device information, such as the MAC address, by sending a specially...

WordPress plugin Post Grid and Gutenberg Blocks – ComboBlocks 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... WordPress plugin Post Grid and...

Google Docs used by infostealer ACRStealer as part of attack

An infostealer known as ACRStealer is using legitimate platforms like Google Docs and Steam as part of an attack, according to researchers. ACRStealer is often distributed via the tried and tested method of download as cracks and keygens, which are used in software piracy. The infostealer has bee...

PT-2025-6911

Name of the Vulnerable Software and Affected Versions: Orca HCM from LEARNING DIGITAL affected versions not specified Description: The issue is related to an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user. Recommendations: At t...