PT-2025-3952 · Unknown · Campcodes School Management

Name of the Vulnerable Software and Affected Versions: Campcodes School Management Software version 1.0 Description: A cross-site scripting issue has been found in the Create Id Card Page component, specifically in the file /create-id-card. The manipulation of the ID Card Title argument leads to...

Avery had credit card skimmer stuck on its site for months

The consequences of a wave of credit card skimmers—which is normal around the holidays—are starting to show. Label maker Avery has filed a data breach notification, saying 61,193 people may have had their credit card details stolen. On December 9, Avery said it became aware of an attack on its...

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability...

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability...

CVE-2025-21312

CVE-2025-21312 is described as a Windows Smart Card Reader Information Disclosure vulnerability. The core technical details available across connected sources are limited to the CVE label, a CVSSv3.1 base score of 2.4 (PHYSICAL attack, low impact on confidentiality, no impact on integrity/availab...

CVE-2025-21312 Windows Smart Card Reader Information Disclosure Vulnerability

...

CVE-2025-21312 Windows Smart Card Reader Information Disclosure Vulnerability

...

Windows Smart Card Reader Information Disclosure Vulnerability

...

PT-2025-3497 · Monetdb · Monetdb Server

Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.49.1 Description: The issue in the exps card component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.49.1, consider restricting the use o...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Smart Card. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions...

WordPress Skimmers Evade Detection by Injecting Themselves into Database Tables

Cybersecurity researchers are warning of a new stealthy credit card skimmer campaign that targets WordPress e-commerce checkout pages by inserting malicious JavaScript code into a database table associated with the content management system CMS. "This credit card skimmer malware targeting WordPre...

GroupGreeting e-card site attacked in “zqxq” campaign

This article was researched and written by Stefan Dasic, manager, research and response forThreatDown, powered by Malwarebytes Malwarebytes recently uncovered a widespread cyberattack—referred to here as the “zqxq” campaign as it closely mirrors NDSW/NDSX-style malware behavior—that compromised...

PT-2025-2032 · WordPress · Unlimited Elements For Elementor

Name of the Vulnerable Software and Affected Versions: Unlimited Elements For Elementor plugin for WordPress versions up to, and including, 1.5.135 Description: The issue is related to Stored Cross-Site Scripting via multiple widgets due to insufficient input sanitization and output escaping on...

Smart Card Services 安全漏洞

Smart Card Services is a smart card service open-sourced by Smart Card Services. A security vulnerability exists in Smart Card Services that stems from the presence of a stack-based buffer overflow vulnerability...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55411

CVE-2024-55411 affects the SUNIX Multi I/O Card, specifically the snxpcamd.sys driver (v10.1.0.0). The vulnerability allows an attacker to perform arbitrary read and write actions by sending crafted IOCTL requests to the affected driver. The root cause is exploitation of IOCTL handling within snx...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

CVE-2024-55411

An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...

SUNIX Multi I/O Card 安全漏洞

SUNIX Multi I/O Card is a controller from SUNIX Technology China. A security vulnerability exists in SUNIX Multi I/O Card version v10.1.0.0. An attacker can exploit this vulnerability to perform arbitrary read and write operations via specially crafted IOCTL requests...

New PhishWP Plugin on Russian Forum Turns Sites into Phishing Pages

SlashNext has discovered a malicious WordPress plugin, PhishWP, which creates convincing fake payment pages to steal your credit card information, 3DS codes, and personal data...