CVE-2025-6418

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/editqueryaccount.php. The manipulation of the argument Name leads to sql injection. The attack may be launched...

Israel Says Iran Is Hacking Security Cameras for Spying

Plus: Ukrainian hackers reportedly knock out a key Russian internet provider, China’s Salt Typhoon hackers claim another victim, and the UK hits 23andMe with a hefty fine over its 2023 data breach...

POCO 安全漏洞

POCO is a cross-platform C++ library open-sourced by POCO. It is used to build web and internet based applications that run on desktop, server, mobile, IoT and embedded systems. A security vulnerability exists in POCO 1.14.1 and earlier versions, which stems from a null pointer dereference due to...

Anubis Ransomware Lists Disneyland Paris as New Victim

Anubis ransomware group claims a 64GB data breach at Disneyland Paris, leaking some engineering files and attraction plans via its dark web site...

MAL-2025-5197 Malicious code in next-sweetalert2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8045e5172fb2ccb88fcd16b2a66207ca2896e30031828b942dffcf423ebbb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kitten 安全漏洞

kitten is a lightweight kernel open-sourced by HobbesOSR. A security vulnerability exists in kitten, which stems from resource consumption due to incorrect operation of the function setpteat in file /include/arch-arm64/pgtable.h...

The vulnerability of the gsf_base64_encode_simple function in the structured files library. The GNOME Project’s libgsf allows attackers to compromise the confidentiality of protected information.

The vulnerability of the gsfbase64encodesimple function in the structured file library: The GNOME Project’s libgsf relies on the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

The vulnerability of the ath12k_dp_rx_process() function in the Wi-Fi driver’s code, located at drivers/net/wireless/ath/ath12k/dp_rx.c, in the Linux kernel, allows a hacker to compromise privacy.

The vulnerability of the ath12kdprxprocess function in the Wi-Fi driver’s code, located at drivers/net/wireless/ath/ath12k/dprx.c, in the Linux kernel, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise confidentiality...

Data Breach Reporting for regulatory requirements with Microsoft Data Security Investigations​​

Seventy-four percent of organizations surveyed experienced at least one data security incident with their business data exposed in the previous year as reported in Microsoft’s Data Security Index: Trends, insights, and strategies to secure data report. Despite the best people, process and...

MAL-2025-5088 Malicious code in solana-web3-adapter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e75c393c8da1b623873b652c0e4024a25d635513e641c2c50d5899421160ec Any computer that has this package installed or running should be considered...

MAL-2025-5014 Malicious code in test.reativity.package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6f730b0a0fe3d91bde9a315e7378e550dc9f7227742ce7918c5caa6d9a88d80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Zoomcar Data Breach Exposes Personal Info of 8.4 Million Users

Zoomcar confirms 2025 breach affecting 8.4M users, echoing its 2018 data leak. Personal info exposed, financial data safe, investigation ongoing...

PT-2025-25650

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway affected versions not specified Description The issue concerns improper access control on the NetScaler Management Interface in Citrix NetScaler ADC and NetScaler Gateway. Recommendations At the momen...

Adobe Acrobat Reader Information Disclosure Vulnerability (CNVD-2025-13316)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

ComfyUI 安全漏洞

ComfyUI is one of the most powerful and modular diffusion model GUIs and backends for comfyanonymous individual developers. A security vulnerability exists in ComfyUI version 0.3.40, which stems from a dynamic attribute issue that could lead to object attribute manipulation...

TencentOS Server 2: flatpak (TSSA-2024:0502)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0502 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Hackers Leak Data of 10,000 VirtualMacOSX Customers in Alleged Breach

Hackers leak data of 10,000 VirtualMacOSX customers in alleged breach, exposing names, emails, passwords, and financial details on a hacking forum...

Jasmin The Ransomware 安全漏洞

Jasmin The Ransomware is a powerful ransomware security testing tool used by ReadTeams, a personal developer of Siddhant Gour. A security vulnerability exists in Jasmin The Ransomware version 1.0.1 and prior versions, which stems from an incorrect manipulation of the parameter Search in the file...

MAL-2025-4988 Malicious code in routerprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bb5da39b59767e758d61cc281539a1860fb4914fc3b6a63e5bb7adfc9a4e12e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the built-in web server boa (/boafrm/formDMZ) of TOTOLINK EX1200T router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the built-in web server boa /boafrm/formDMZ of TOTOLINK EX1200T routers is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by sending a specially crafted...