3991 matches found
WSO2多款产品 安全漏洞
WSO2 API Manager and others are products of WSO2, Inc. of the U.S. WSO2 API Manager is an API lifecycle management solution.WSO2 Identity Server IS is an identity server.WSO2 Open Banking IAM is an identity and access management solution for the Open Banking domain.WSO2 Open Banking IAM is an...
“Sneaky” new Android malware takes over your phone, hiding in fake news and ID apps
Researchers at Cyfirma have investigated Android Trojans capable of stealing sensitive data from compromised devices. The malware spreads by pretending to be trusted apps—like a news reader or even digital ID apps—tricking users into downloading it by accident. In reality, it’s Android-targeting...
New Android Trojan 'Herodotus' Outsmarts Anti-Fraud Systems by Typing Like a Human
Cybersecurity researchers have disclosed details of a new Android banking trojan called Herodotus that has been observed in active campaigns targeting Italy and Brazil to conduct device takeover DTO attacks. "Herodotus is designed to perform device takeover while making first attempts to mimic...
CVE-2025-12244
A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed...
CVE-2025-60983
Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...
EUVD-2025-36219
Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...
CVE-2025-60983
Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...
CVE-2025-12244
A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed...
CVE-2025-12244 code-projects Simple E-Banking System register.php cross site scripting
A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed...
CVE-2025-12244
The CVE-2025-12244 entry affects Code-Projects Simple E-Banking System 1.0. The vulnerable component is the file /eBank/register.php, where manipulation of the Username argument can trigger cross-site scripting. The issue is exploitable remotely and an exploit has been publicly disclosed. While m...
CVE-2025-12244 code-projects Simple E-Banking System register.php cross site scripting
A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed...
Neptune Rubikon Banking Solution 安全漏洞
Neptune Rubikon Banking Solution is a banking services platform from Neptune UK. A security vulnerability exists in Neptune Rubikon Banking Solution version 4.0.3, which originates from the presence of reflective cross-site scripting in the Search For Customers Information endpoint...
PT-2025-43999
Name of the Vulnerable Software and Affected Versions Rubikon Banking Solution version 4.0.3 Description A reflected cross-site scripting issue exists in the "Search For Customers Information" endpoints of Rubikon Banking Solution. This allows for the injection of malicious scripts through...
CVE-2025-60983
Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...
PT-2025-43901
Name of the Vulnerable Software and Affected Versions code-projects Simple E-Banking System version 1.0 Description A flaw exists in code-projects Simple E-Banking System 1.0, specifically within the /eBank/register.php file. Manipulation of the Username argument can result in cross site scriptin...
Code-Projects Simple E-Banking System 代码注入漏洞
Code-Projects Simple E-Banking System is a simple e-banking system from Code-Projects. A code injection vulnerability exists in Code-Projects Simple E-Banking System version 1.0, which stems from an incorrect manipulation of the parameter Username in the file /eBank/register.php, which could lead...
CVE-2025-60983
CVE-2025-60983 is a reflected Cross Site Scripting (XSS) vulnerability affecting Rubikon Banking Solution version 4.0.3, specifically in the "Search For Customers Information" endpoints. The connected sources confirm the affected product and component, and describe the root cause as input reflect...
CVE-2025-60983
Reflected Cross Site Scripting vulnerability in Rubikon Banking Solution 4.0.3 in the "Search For Customers Information" endpoints...
Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation
The threat actors behind a large-scale, ongoing smishing campaign have been attributed to more than 194,000 malicious domains since January 1, 2024, targeting a broad range of services across the world, according to new findings from Palo Alto Networks Unit 42. "Although these domains are...
