CVE-2025-5378

CVE-2025-5378 affects Astun Technology iShare Maps 5.4.0, specifically the mycouncil2.aspx component where the atTxtStreet parameter can be manipulated, triggering cross-site scripting. The vulnerability is exploitable remotely and public exploits have been disclosed. Multiple connected sources c...

CVE-2025-5378 Astun Technology iShare Maps mycouncil2.aspx cross site scripting

A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0. This affects an unknown part of the file mycouncil2.aspx. The manipulation of the argument atTxtStreet leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-5377

CVE-2025-5377 affects Astun Technology iShare Maps 5.4.0. The issue is a cross-site scripting vulnerability in historic1.asp caused by improper handling of the Zoom parameter, which can be triggered remotely. Multiple connected sources confirm the vulnerability and public disclosure of the exploi...

CVE-2025-5377 Astun Technology iShare Maps historic1.asp cross site scripting

A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit...

CVE-2025-5377 Astun Technology iShare Maps historic1.asp cross site scripting

A vulnerability was found in Astun Technology iShare Maps 5.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file historic1.asp. The manipulation of the argument Zoom leads to cross site scripting. The attack may be launched remotely. The exploit...

Blockchain Powered Edge Intelligence for U-Healthcare in Privacy Critical and Time Sensitive Environment

Edge Intelligence EI serves as a critical enabler for privacy-preserving systems by providing AI-empowered computation and distributed caching services at the edge, thereby minimizing latency and enhancing data privacy. The integration of blockchain technology further augments EI frameworks by...

Review of Blockchain-Based Approaches to Spent Fuel Management in Nuclear Power Plants

This study addresses critical challenges in managing the transportation of spent nuclear fuel, including inadequate data transparency, stringent confidentiality requirements, and a lack of trust among collaborating parties, issues prevalent in traditional centralized management systems. Given the...

PT-2025-23402

Name of the Vulnerable Software and Affected Versions Astun Technology iShare Maps version 5.4.0 Description A issue was found in the file historic1.asp, where the manipulation of the Zoom argument leads to cross site scripting. This can be exploited remotely. The vendor was contacted about this...

Astun Technology iShare Maps 代码注入漏洞

Astun Technology iShare Maps is a software for public map services from Astun Technology, UK. A code injection vulnerability exists in Astun Technology iShare Maps version 5.4.0, which originates from a cross-site scripting attack due to an incorrect manipulation of the parameter atTxtStreet in t...

Astun Technology iShare Maps 代码注入漏洞

Astun Technology iShare Maps is a software for public map services from Astun Technology, UK. A code injection vulnerability exists in Astun Technology iShare Maps version 5.4.0, which originates from a cross-site scripting attack due to an incorrect manipulation of the parameter Zoom in the file...

PT-2025-23403

Name of the Vulnerable Software and Affected Versions Astun Technology iShare Maps version 5.4.0 Description A problematic vulnerability has been found in Astun Technology iShare Maps, affecting an unknown part of the file mycouncil2.aspx. The manipulation of the atTxtStreet argument leads to...

U.S. Sanctions Funnull for $200M Romance Baiting Scams Tied to Crypto Fraud

The U.S. Department of Treasury's Office of Foreign Assets Control OFAC has levied sanctions against a Philippines-based company named Funnull Technology Inc. and its administrator Liu Lizhi for providing infrastructure to conduct romance baiting scams that led to massive cryptocurrency losses. T...

U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams

Image: Shutterstock, ArtHead. The U.S. government today imposed economic sanctions on Funnull Technology Inc. , a Philippines-based company that provides computer infrastructure for hundreds of thousands of websites involved in virtual currency investment scams known as “pig butchering." In Janua...

CVE-2025-5326

A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /adpweb/wechat/verifyToken/. The manipulation leads to deserialization. The attack may be launched remotel...

CVE-2025-5326 zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 verifyToken deserialization

A vulnerability was found in zhilink 智互联深圳科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as critical. Affected by this issue is some unknown functionality of the file /adpweb/wechat/verifyToken/. The manipulation leads to deserialization. The attack may be launched remotel...

How to deploy AI safely

In this blog you will hear directly from Corporate Vice President and Deputy Chief Information Security Officer CISO for AI, Yonatan Zunger, about how to build a plan to deploy AI safely. This blog is part of a new ongoing series where our Deputy CISOs share their thoughts on what is most importa...

Surveillance Via Smart Toothbrush

The only links are from The Daily Mail and The Mirror, but a marital affair was discovered because the cheater was recorded using his smart toothbrush at home when he was supposed to be at work...

Smart Contracts for SMEs and Large Companies

Research on blockchains addresses multiple issues, with one being writing smart contracts. In our previous research we described methodology and a tool to generate, in automated fashion, smart contracts from BPMN models. The generated smart contracts provide support for multi-step transactions th...

The vulnerability of the web_aaa_loginAuthlistEdit() function in PLANET Technology’s microcontroller software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the webaaaloginAuthlistEdit function in PLANET Technology’s microcontroller software is related to buffer overflow during the processing of the theauthName parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

Arbitrary File Read Vulnerability in PicHome of Beijing Qiaoqiao Times Network Technology Co.

PicHome is an image display portal, image search engine for the Ouatto document system. Beijing Qiaoqiao Times Network Technology Co., Ltd PicHome has an arbitrary file reading vulnerability that can be exploited by attackers to obtain sensitive information...