Skip to main content
Abstract art
Abstract art
Abstract art
Abstract art

For providers

10 Mar 2025
Riasztás

NA - CVE-2025-2137 - Out of bounds read in V8 in Google Chrome prior...

Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
security-database.com
Read more
10 Mar 2025
Riasztás

NA - CVE-2025-25907 - tianti v2.3 was discovered to contain a...

tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save. This vulnerability allows attackers to execute arbitrary operations via a crafted GET or...
security-database.com
Read more
10 Mar 2025
Riasztás

NA - CVE-2025-25908 - A stored cross-site scripting (XSS)...

A stored cross-site scripting (XSS) vulnerability in tianti v2.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the coverImageURL parameter at...
security-database.com
Read more
10 Mar 2025
Riasztás

NA - CVE-2025-27910 - tianti v2.3 was discovered to contain a...

tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status. This vulnerability allows attackers to execute arbitrary operations via a crafted...
security-database.com
Read more
10 Mar 2025
Riasztás

NA - CVE-2025-27610 - Rack provides an interface for developing web...

Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.13, 3.0.14, and 3.1.12, `Rack::Static` can serve files under the specified `root:` even if `urls:` are...
security-database.com
Read more
10 Mar 2025
Riasztás

NA - CVE-2025-27924 - Nintex Automation 5.6 and 5.7 before 5.8 has a...

Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action.
security-database.com
Read more
10 Mar 2025
Riasztás

NA - CVE-2025-27925 - Nintex Automation 5.6 and 5.7 before 5.8 has...

Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input.
security-database.com
Read more
10 Mar 2025
Riasztás

NA - CVE-2025-27926 - In Nintex Automation 5.6 and 5.7 before 5.8,...

In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by unauthorized users.
security-database.com
Read more
9 Mar 2025
Biztonsági szemle

Ransomware Attacks a Decade In: What Changed? What Didn't? - Mike Mitchell - ESW #397

scmagazine.com
Read more
9 Mar 2025
Biztonsági szemle

Commonly Probed Webshell URLs, (Sun, Mar 9th)

Looking over some weblogs on my way back from class in Baltimore, I feel a reminder is appropriate that (a) weblogs are still a thing and (b) what some of the common webshells are that attackers are looking for.
isc.sans.edu
Read more
Language
Type