3467 matches found
PT-2025-11178
Name of the Vulnerable Software and Affected Versions: Tenda RX3 US RX3V1.0br V16.03.13.11 multi TDE01 Description: The issue is related to a Buffer Overflow that can be triggered via the startIp and endIp parameters at the "/goform/SetPptpServerCfg" API endpoint. This allows attackers to cause a...
Emergency Ambulance Hiring Portal pagedes parameter SQL Injection Vulnerability
Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the pagedes parameter of the /admin/about-us.php file. An attacker c...
Silk Typhoon Hackers Indicted
Lots of interesting details in the story: The US Department of Justice on Wednesday announced the indictment of 12 Chinese individuals accused of more than a decade of hacker intrusions around the world, including eight staffers for the contractor i-Soon, two officials at China's Ministry of Publ...
CVE-2025-1382
The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...
CVE-2025-1382
The Contact Us By Lord Linus WordPress plugin (versions 2.6 and earlier ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to missing CSRF checks, sanitization, and escaping in certain areas. An attacker can exploit this to force a logged-in administrator to add Stored XSS payloads...
CVE-2025-1382 Contact Us By Lord Linus <= 2.6 - Admin+ Stored XSS via CSRF
The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...
PT-2025-10435
Name of the Vulnerable Software and Affected Versions Contact Us By Lord Linus WordPress plugin versions 2.6 and earlier Description The issue is related to the lack of CSRF check in some places and missing sanitisation as well as escaping in the Contact Us By Lord Linus WordPress plugin. This...
CVE-2025-1382: Cross-Site Request Forgery (CSRF)
The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...
CVE-2025-2057
A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. It is possible to launch the attack remotely. The...
PHPGurukul Emergency Ambulance Hiring Portal 注入漏洞
Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the pagedes parameter of the /admin/about-us.php file. An attacker c...
The US Army Is Using ‘CamoGPT’ to Purge DEI From Training Materials
Developed to boost productivity and operational readiness, the AI is now being used to “review” diversity, equity, inclusion, and accessibility policies to align them with President Trump’s orders...
The Combined Cipher Machine
Interesting article--with photos!--of the US/UK "Combined Cipher Machine" from WWII...
US Charges 12 Alleged Spies in China’s Freewheeling Hacker-for-Hire Ecosystem
The Justice Department claims 10 alleged hackers and two Chinese government officials took part in a wave of cyberattacks around the globe that included breaching the US Treasury Department and more...
CVE-2025-25127
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rohitashv Singhal Contact Us By Lord Linus contact-us-by-lord-linus allows Reflected XSS.This issue affects Contact Us By Lord Linus: from n/a through = 2.6...
CVE-2025-25127
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rohitashv Singhal Contact Us By Lord Linus contact-us-by-lord-linus allows Reflected XSS.This issue affects Contact Us By Lord Linus: from n/a through = 2.6...
CVE-2025-25127
CVE-2025-25127 is a reflected cross-site scripting (XSS) vulnerability affecting WordPress plugin Contact Us By Lord Linus up to version 2.6. The issue arises from improper input neutralization during web page generation, enabling attackers to reflect script payloads via user-supplied input. The ...
WordPress plugin Contact Us By Lord Linus 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an applicatio...
CVE-2025-25127: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rohitashv Singhal Contact Us By Lord Linus contact-us-by-lord-linus allows Reflected XSS.This issue affects Contact Us By Lord Linus: from n/a through = 2.6...
PT-2025-9446
Name of the Vulnerable Software and Affected Versions Contact Us By Lord Linus versions 2.6 and earlier Description The issue affects the Contact Us By Lord Linus software, allowing Reflected XSS due to improper neutralization of input during web page generation. Recommendations For versions 2.6...
