2113 matches found
CVE-2025-50074
CVE-2025-50074 affects Oracle Financial Services Revenue Management and Billing (component: Security Management System) in versions 2.9.0.0.0 through 7.2.0.0.0. The vulnerability allows a high-privilege attacker with network access over HTTP to obtain unauthorized access to sensitive data or full...
New .NET CAPI Backdoor Targets Russian Auto and E-Commerce Firms via Phishing ZIPs
Cybersecurity researchers have shed light on a new campaign that has likely targeted the Russian automobile and e-commerce sectors with a previously undocumented .NET malware dubbed CAPI Backdoor. According to Seqrite Labs, the attack chain involves distributing phishing emails containing a ZIP...
New .NET CAPI Backdoor Targets Russian Auto and E-Commerce Firms via Phishing ZIPs
Cybersecurity researchers have shed light on a new campaign that has likely targeted the Russian automobile and e-commerce sectors with a previously undocumented .NET malware dubbed CAPI Backdoor. According to Seqrite Labs, the attack chain involves distributing phishing emails containing a ZIP...
Extortion and ransomware drive over half of cyberattacks
In 80% of the cyber incidents Microsoft’s security teams investigated last year, attackers sought to steal data—a trend driven more by financial gain than intelligence gathering. According to the latest Microsoft Digital Defense Report, written with our Chief Information Security Officer Igor...
CVE-2025-10610
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SFS Consulting Information Processing Industry and Foreign Trade Inc. Winsure allows Blind SQL Injection.This issue affects Winsure: through Version dated 21.08.2025...
CVE-2025-10610
CVE-2025-10610 corresponds to an SQL injection vulnerability in Winsure (SFS Winsure) caused by improper neutralization of special elements in SQL commands, enabling blind SQL injection. Affected: Winsure versions up to 21.08.2025. Public documentation consistently describes the flaw and its impa...
PT-2025-41767
Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2025x Description A stored Cross-site Scripting XSS issue exists in the Issue Management component of ENOVIA Collaborative Industry Innovator. This allo...
CVE-2025-10557: Improper Neutralization of Input During Web Page Generation
A stored Cross-site Scripting XSS vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...
CVE-2025-52960
creationtimestamp| type| source ---|---|--- 2025-10-08 16:01:06+00:00| seen| https://bsky.app/profile/infosecindustry.bsky.social/post/3m2oz7fgopa2s...
CVE-2025-59962
creationtimestamp| type| source ---|---|--- 2025-10-08 15:59:33+00:00| seen| https://bsky.app/profile/infosecindustry.bsky.social/post/3m2oz4lw2p62m...
INE Security Releases Industry Benchmark Report: “Wired Together: The Case for Cross-Training in Networking and Cybersecurity”
Raleigh, United States, 7th October 2025, CyberNewsWire...
EUVD-2008-3035
Malware in sbrugna...
EUVD-2010-0901
Malware in sbrugna...
EUVD-2012-1773
Malware in sbrugna...
EUVD-2020-17939
Malware in sbrugna...
EUVD-2013-2343
Malware in sbrugna...
EUVD-2012-1684
Malware in sbrugna...
EUVD-2011-0867
Malware in sbrugna...