11790 matches found
FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services
Various industrial organizations in the Asia-Pacific APAC region have been targeted as part of phishing attacks designed to deliver a known malware called FatalRAT. "The threat was orchestrated by attackers using legitimate Chinese cloud content delivery network CDN myqcloud and the Youdao Cloud...
Siemens SIMATIC Devices Linux Kernel Missing Release of Memory after Effective Lifetime (CVE-2022-1012)
A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem. This plugin only works with Tenable.ot. Please visit...
Siemens SIMATIC S7-1500 TM MFP BIOS Out-of-bounds Write (CVE-2020-10029)
The GNU C Library aka glibc or libc6 before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to...
Security Bulletin: IBM Sterling Connect:Direct for Unix is vulnerable to denial of service and unauthorized data access attacks due to IBM Runtime Environment Java Technology Edition Version 8
Summary IBM Java 8 is used by IBM Sterling Connect:Direct for Unix in product configuration and management. IBM Sterling Connect:Direct for Unix is impacted by denial of service and unauthorized data access attacks due to IBM Java 8. IBM Sterling Connect:Direct for Unix has upgraded IBM Java 8 to...
CVE-2025-26529
creationtimestamp| type| source ---|---|--- 2025-02-24 20:22:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5210 2025-02-24 21:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114061063435730740 2025-02-24 22:08:35+00:00| seen|...
CVE-2025-26764
Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.22...
CVE-2025-0545
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...
CVE-2025-0545
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...
CVE-2025-0545
The CVE-2025-0545 vulnerability concerns Tekrom Technology’s T-Soft E-Commerce before v5, where improper neutralization of input during Web page generation enables Cross‑Site Scripting (XSS). The issue is tied to input handling in generating web pages, allowing injected scripts to run in the cont...
CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...
CVE-2025-0545 XSS in Tekrom Technology's T-Soft E-Commerce
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tekrom Technology T-Soft E-Commerce allows Cross-Site Scripting XSS. This issue affects T-Soft E-Commerce: before v5...
Command Execution Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group Co.
Tianrongxin Technology Group Co., Ltd. is a provider specializing in network security, big data and cloud services. A command execution vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group Co., Ltd. that can be exploited by an attacker to execute arbitra...
CVE-2025-1595 Anhui Xufan Information Technology EasyCVR getbaseconfig information disclosure
A vulnerability has been found in Anhui Xufan Information Technology EasyCVR up to 2.7.0 and classified as problematic. This vulnerability affects unknown code of the file /api/v1/getbaseconfig. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit ha...
CVE-2025-26764
Missing Authorization vulnerability in enituretechnology Distance Based Shipping Calculator distance-based-shipping-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Distance Based Shipping Calculator: from n/a through = 2.0.22...
CVE-2025-26764
CVE-2025-26764 describes a Missing Authorization vulnerability in the WordPress Distance Based Shipping Calculator plugin, affecting versions up to 2.0.22. An attacker could exploit the misconfigured access control to update settings. Patch status indicates the issue is addressed in versions late...
PT-2025-7612 · Enituretechnology · Enituretechnology Distance Based Shipping Calculator
Name of the Vulnerable Software and Affected Versions: enituretechnology Distance Based Shipping Calculator versions 2.0.22 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels...
SQL Injection Vulnerability in UFIDA NC of UFIDA Network Technology Co.
UFIDA NC is a comprehensive business management software for large enterprises. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in Data Application Server of UFIDA Network Technology Co.
UFIDA is a leading provider of management software, ERP software, group management software, human resource management software, customer relationship management software, small business management software, financial and administrative institution management software, automotive industry...
Command Execution Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group Co.
Tianrongxin Technology Group Co., Ltd. is a high-tech enterprise focusing on network security and cloud computing solutions. A command execution vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group Company Limited, which can be exploited by attackers to...
