Data-Driven Falsification of Cyber-Physical Systems

Whitepaper called Data-Driven Falsification Of Cyber-Physical Systems...

PHPGurukul Cyber Cafe Management System 注入漏洞

Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobilenumber in the file /adminprofile.php. An attacker can...

PT-2025-19821 · Unknown · Phpgurukul Cyber Cafe Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Cyber Cafe Management System version 1.0 Description: A critical vulnerability was found in PHPGurukul Cyber Cafe Management System. This affects an unknown part of the file /adminprofile.php. The manipulation of the argument...

CVE-2025-24977

CVE-2025-24977 (OpenCTI) affects OpenCTI prior to version 6.4.11. The vulnerability arises because a user with the privilege to manage customizations can misuse web-hooks to execute commands on the underlying infrastructure and access internal server-side secrets, effectively allowing a root shel...

Chinese Group TheWizards Exploits IPv6 to Drop WizardNet Backdoor

ESET has discovered Spellbinder, a new tool used by the China-linked cyber espionage group TheWizards to conduct AitM…...

CVE-2025-4226

A vulnerability classified as critical has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. This affects an unknown part of the file /add-computer.php. The manipulation of the argument compname/comploc leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-4226

A vulnerability classified as critical has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. This affects an unknown part of the file /add-computer.php. The manipulation of the argument compname/comploc leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-4226

CVE-2025-4226 affects PHPGurukul/Campcodes Cyber Cafe Management System 1.0. The vulnerability is a SQL injection in add-computer.php triggered by manipulating the compname/comploc parameters, exploitable remotely. Multiple sources confirm the issue and public disclosure; several advisories refer...

CVE-2025-4226 PHPGurukul/Campcodes Cyber Cafe Management System add-computer.php sql injection

A vulnerability classified as critical has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. This affects an unknown part of the file /add-computer.php. The manipulation of the argument compname/comploc leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-4226 PHPGurukul/Campcodes Cyber Cafe Management System add-computer.php sql injection

A vulnerability classified as critical has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. This affects an unknown part of the file /add-computer.php. The manipulation of the argument compname/comploc leads to sql injection. It is possible to initiate the attack remotely. The...

PHPGurukul Cyber Cafe Management System SQL注入漏洞

Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter compname/comploc in the file add-computer.php resulting in SQL injection. No details of the...

PT-2025-18942 · Unknown · Phpgurukul Cyber Cafe Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Cyber Cafe Management System version 1.0 Description: A critical vulnerability has been found in PHPGurukul Cyber Cafe Management System. This affects an unknown part of the file /add-computer.php. The manipulation of the compname...

UK Luxury Retailer Harrods Hit by Cyber Attack After M&S, Co-op

Luxury retailer Harrods confirms a cyber attack attempt, restricting internet access but keeping its online store running. Learn…...

PT-2025-18918 · Undefined · Undefined

ParsedReport CompletenessHigh 01-05-2025 Investigating Iranian Intrusion into Strategic Middle East Critical Infrastructure https://www.fortinet.com/content/dam/fortinet/assets/reports/report-incident-response-middle-east.pdf Report completeness: High Actors/Campaigns: Fox kitten Bohrium Unc1878...

Machine Learning for Cyber-Attack Identification from Traffic Flows

This paper presents our simulation of cyber-attacks and detection strategies on the traffic control system in Daytona Beach, FL. using Raspberry Pi virtual machines and the OPNSense firewall, along with traffic dynamics from SUMO and exploitation via the Metasploit framework. We try to answer the...

Understanding the challenges of securing an NGO

Welcome to this week's edition of the Threat Source newsletter. Recently, I was invited to sit on a panel at the CIO4Good Conference here in Washington D.C., where I talked about incident response and cyber preparedness to a room full of CIOs who help lead wonderful missions to help others. I'm...

CVE-2025-39538

creationtimestamp| type| source ---|---|--- 2025-05-01 13:00:06+00:00| published-proof-of-concept| Telegram/Z0ari8MHZAzBUd7K9yxhwtBySsURYEVG61pidF9swyP9zTE 2025-08-03 21:03:08+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbynxdy2b...

KUNBUS GmbH Revolution Pi (Update A)

RISK EVALUATION Successful exploitation of these vulnerabilities could allow attackers to bypass authentication, gain unauthorized access to critical functions, and execute malicious server-side includes SSI within a web page. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

CVE-2025-4148

creationtimestamp| type| source ---|---|--- 2025-05-01 05:48:31+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114431001297247363 2025-05-01 05:56:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo3mskiusm22 2025-05-01 06:00:40+00:00| published-proof-of-concept...

CVE-2025-24887

OpenCTI has a CVE-2025-24887 vulnerability affecting versions 6.4.8–6.4.9. The issue lets a user bypass the allow/deny lists to modify attributes meant to be immutable, including toggling the external flag, changing a user’s own token, and editing non-allow-listed attributes such as otp_qr and ot...