28869 matches found
Tomiris Shifts to Public-Service Implants for Stealthier C2 in Attacks on Government Targets
The threat actor known as Tomiris has been attributed to attacks targeting foreign ministries, intergovernmental organizations, and government entities in Russia with an aim to establish remote access and deploy additional tools. "These attacks highlight a notable shift in Tomiris's tactics, name...
Blood Bank Management System ๅฎๅ จๆผๆด
Blood Bank Management System is a blood bank management system by shridhar shukla individual developer. A security vulnerability exists in Blood Bank Management System version 1.0, which stems from a SQL injection issue in the cancel.php component that could lead to unauthorized access...
LeechHijack: Covert Computational Resource Exploitation in Intelligent Agent Systems
Large Language Model LLM-based agents have demonstrated remarkable capabilities in reasoning, planning, and tool usage. The recently proposed Model Context Protocol MCP has emerged as a unifying framework for integrating external tools into agent systems, enabling a thriving open ecosystem of...
EUVD-2025-199989
A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass...
The vulnerability of the FortiVoice corporate telephony software lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.
The vulnerability of the FortiVoice corporate telephony software relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the dataexport.php web tool of the PostgreSQL administration PHP script phpPgAdmin allows a perpetrator to execute arbitrary commands.
The vulnerability of the dataexport.php web tool of the phpPgAdmin administration tool for PostgreSQL lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
COGNITION: From Evaluation to Defense against Multimodal LLM CAPTCHA Solvers
This paper studies how multimodal large language models MLLMs undermine the security guarantees of visual CAPTCHA. We identify the attack surface where an adversary can cheaply automate CAPTCHA solving using off-the-shelf models. We evaluate 7 leading commercial and open-source MLLMs across 18...
Blood Bank Management System ๅฎๅ จๆผๆด
Blood Bank Management System is a blood bank management system by shridhar shukla individual developer. A security vulnerability exists in Blood Bank Management System version 1.0, which stems from a SQL injection issue in the abs.php component that could lead to unauthorized access...
PT-2025-48460
Name of the Vulnerable Software and Affected Versions Blood Bank Management System version 1.0 Description A SQL injection issue exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application does not properly sanitize user-supplied input used in SQL querie...
Blood Bank Management System ๅฎๅ จๆผๆด
Blood Bank Management System is a blood bank management system by shridhar shukla individual developer. A security vulnerability exists in Blood Bank Management System version 1.0, which stems from a SQL injection issue in the receiverLogin.php component that could lead to unauthorized access...
The vulnerability of the JavaScript script handler in Google Chromeโs V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the JavaScript script handler in Google Chromeโs V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...
๐ Commvault CLI 11.36.60 Remote Code Execution
Proof of concept exploit for the Commvault CLI version 11.36.60 remote code execution vulnerability. ============================================================================================================================================= | Title : Commvault CLI 11.36.60 RCE PHP Implementatio...
mJobtime ๅฎๅ จๆผๆด
mJobtime is a time tracking and job management software from the US company mJobtime. A security vulnerability exists in mJobtime version v15.7.2 that originates from an unauthenticated attacker being able to execute arbitrary SQL statements via a specially crafted POST request, potentially...
CVE-2025-51683
A blind SQL Injection SQLi vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/updateprofileServer endpoint...
CVE-2025-51683
The mJobtime time tracking and job management software, version v15.7.2 , is vulnerable to a blind SQL Injection (SQLi) . This flaw allows unauthenticated attackers to execute arbitrary SQL statements remotely by sending a crafted POST request to the /Default.aspx/update_profile_Server endpoint. ...
CVE-2025-13788
A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public a...
CVE-2025-13788
chanjet crm is affected by a SQL injection in /tools/upgradeattribute.php via the gblOrgID parameter. The vulnerability affects Chanjet CRM versions up to 20251106 (pre-51107). Root cause: input manipulation in an unknown function leads to injectable SQL. Impact is high (remote attacker, data exp...
Malicious code in chat-prompt-logger (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f25a736985f5c0bb50156fdc7de61e976b16416f42c44a2682b5ce718401383b The package provides a logger of LLM prompts that at the same time looks for hidden instructions and executes them. --- Category: MALICIOUS - The campaign has...
Large Language Models Cannot Reliably Detect Vulnerabilities in JavaScript: The First Systematic Benchmark and Evaluation
Researchers have proposed numerous methods to detect vulnerabilities in JavaScript, especially those assisted by Large Language Models LLMs. However, the actual capability of LLMs in JavaScript vulnerability detection remains questionable, necessitating systematic evaluation and comprehensive...
[SECURITY] Fedora 42 Update: drupal7-7.103-1.fc42
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...