Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

Source: TheRegister
June 4th, 2025 (about 10 hours ago)

CVE-2025-5574

Description: A vulnerability classified as critical has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This affects an unknown part of the file /add-company.php. The manipulation of the argument companyname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Es wurde eine Schwachstelle in PHPGurukul Dairy Farm Shop Management System 1.3 entdeckt. Sie wurde als kritisch eingestuft. Hiervon betroffen ist ein unbekannter Codeblock der Datei /add-company.php. Mittels Manipulieren des Arguments companyname mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.

CVSS: MEDIUM (6.9)

Source: CVE
June 4th, 2025 (about 10 hours ago)

CVE-2025-5573

Description: A vulnerability was found in D-Link DCS-932L 2.18.01. It has been rated as critical. Affected by this issue is the function setSystemWizard/setSystemControl of the file /setSystemWizard. The manipulation of the argument AdminID leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Eine kritische Schwachstelle wurde in D-Link DCS-932L 2.18.01 ausgemacht. Davon betroffen ist die Funktion setSystemWizard/setSystemControl der Datei /setSystemWizard. Mittels dem Manipulieren des Arguments AdminID mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.

CVSS: MEDIUM (5.3)

Source: CVE
June 4th, 2025 (about 10 hours ago)

CVE-2025-5572

Description: A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. Affected by this vulnerability is the function setSystemEmail of the file /setSystemEmail. The manipulation of the argument EmailSMTPPortNumber leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. In D-Link DCS-932L 2.18.01 wurde eine kritische Schwachstelle ausgemacht. Hierbei betrifft es die Funktion setSystemEmail der Datei /setSystemEmail. Durch Manipulation des Arguments EmailSMTPPortNumber mit unbekannten Daten kann eine stack-based buffer overflow-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung.

CVSS: HIGH (8.7)

Source: CVE
June 4th, 2025 (about 10 hours ago)

CVE-2025-4580

Description: The File Provider WordPress plugin through 1.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Source: CVE
June 4th, 2025 (about 10 hours ago)

CVE-2025-4578

Description: The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
Source: CVE
June 4th, 2025 (about 10 hours ago)
Description: Calling cyber security professionals, culture specialists and leaders to drive uptake of new Cyber security culture principles.
Source: NCSC Alerts and Advisories
June 4th, 2025 (about 11 hours ago)
Description: PPM Industries SpA Adhesive tape PPM Industries As a leading masking tape manufacturer, PPM Industries has been at the forefront of adhesive tape production since 1993. Our expertise in developing high-quality masking and adhesive tape solutions ensures that we meet diverse user requirements and applications across various markets. We pride ourselves on being a trusted partner to B2B customers worldwide, delivering reliable and innovative masking tape products. Trust PPM Industries for adhesive tape solutions you can depend on.Geo: Italy - Leak size: 288 GB Archive - Contains: Files, SQL
Source: Ransomware.live
June 4th, 2025 (about 11 hours ago)
Description: Norgeshus The most important thing you should know about Norgeshus is that we deliver tailor-made solutions to you as a house builder. The house you like in the catalogue is just a starting point. Together with our architects and engineers, you will find the solutions that make your house your DREAM HOUSE. The most important thing you should know about Norgeshus as a house supplier is that we deliver tailor-made solutions to you who are building a house. Be inspired by our house catalogue. The house you like in the catalogue is just a starting point. Our architects and engineers help you make it your dream house. For over 35 years, Norgeshus has built 25,000 homes from Svalbard to Kristiansand. Norgeshus has dealers all over the country who deliver the same safe quality, no matter where you build and live. Find your local dealer to get started with your housing project! We at Norgeshus take pride in offering solid professional expertise and good service, no matter which of our dealers you use. Our craftsmen are passionate about their profession and their craft. At Norgeshus, we listen to our customers and provide professional advice, making it easier for you to make the right decisions when building a house for you and yours.Geo: Norway - Leak size: 78 GB Archive - Contains: Files, SQL, Exchange
Source: Ransomware.live
June 4th, 2025 (about 11 hours ago)
Description: APH Svenska APH Svenska AB is a company that operates in the Flowers, Gifts & Specialty Stores industry. It employs 100to249 people and has 5Mto10M of revenue. The company is headquartered in Malmoe, Skane, SwedenGeo: Sweden - Leak size: 174 GB Archive - Contains: Files
Source: Ransomware.live
June 4th, 2025 (about 11 hours ago)