Share

RSS

More Articles…

• From Secure Online Desktop to Cyberfero: rebranding of the leading cybersecurity company
• NIS: what it is and how it protects cybersecurity
• Advanced persistent threats (APTs): what they are and how to defend yourself
• Penetration Testing and MFA: A Dual Strategy to Maximize Security
• Penetration Testing: Where to Strike to Protect Your IT Network
• Ransomware: a plague that brings companies and institutions to their knees. Should you pay the ransom? Here is the answer.
• Why IT audit and log management are important for Cybersecurity
• Red Team, Blue Team and Purple Team: what are the differences?

Categories …

• Backup as a Service (18)
  • Acronis Cloud Backup (11)
  • Veeam Cloud Connect (4)
• Cloud Conference (3)
• Cloud CRM (1)
• Cloud Server/VPS (22)
• Conferenza Cloud (4)
• Cyberfero (15)
• ICT Monitoring (5)
• Log Management (2)
• News (25)
• ownCloud (4)
• Privacy (7)
• Security (203)
  • Cyber Threat Intelligence (CTI) (8)
  • Deception (4)
  • Ethical Phishing (11)
  • Netwrix Auditor (2)
  • Penetration Test (11)
  • Posture Guard (3)
  • SOCaaS (65)
    • EDR (3)
    • SIEM (13)
    • SOAR (5)
    • UEBA (10)
  • Vulnerabilities (84)
• Web Hosting (15)

Tags

Unknown Feed

Full Disclosure

• CyberDanube Security Research 20251215-0 | Multiple Vulnerabilities in Phoenix Contact FL Switch Series December 18, 2025
  Posted by Thomas Weber | CyberDanube via Fulldisclosure on Dec 17CyberDanube Security Research 20251215-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| FL Switch vulnerable version| 3.40 fixed version| TODO CVE number| CVE-2025-41692, CVE-2025-41693, CVE-2025-41694, | CVE-2025-41695, CVE-2025-41696, CVE-2025-41697, | CVE-2025-41745,...
• [KIS-2025-09] Control Web Panel <= 0.9.8.1208 (admin/index.php) OS Command Injection Vulnerability December 18, 2025
  Posted by Egidio Romano on Dec 17------------------------------------------------------------------------------------ Control Web Panel
• Raydium CP Swap: Unchecked Account Allows Creator Fee Hijacking December 18, 2025
  Posted by LRKTBEYK LRKTBEYK on Dec 17I tried to report these vulnerabilities to ImmuneFi, but they closed it (report 62070) as "out of scope." I believe them when they tell me something is out of scope, so now it&apos;s public. https://github.com/raydium-io/raydium-cp-swap/pull/62 These vulnerabilities collectively enable fee theft, creator fee hijacking, and potential user exploitation through […]
• [CFP] Security BSidesLjubljana 0x7EA | March 13, 2026 December 18, 2025
  Posted by Andraz Sraka on Dec 17MMMMMMMMMMMMMMMMNmddmNMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM MMN..-..--+MMNy:...-.-/yNMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM MMy..ymd-.:Mm::-:osyo-..-mMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM MM:..---.:dM/..+NNyyMN/..:MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM Mm../dds.-oy.-.dMh--mMds++MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM My:::::/ydMmo..-hMMMmo//omMs/+Mm+++++shNMN+//+//+oMNy+///ohM MMMs//yMNo+hMh---m:-:hy+sMN..+Mo..os+.-:Ny--ossssdN-.:yyo+mM...
• [KIS-2025-08] 1C-Bitrix <= 25.100.500 (Translate Module) Remote Code Execution Vulnerability December 16, 2025
  Posted by Egidio Romano on Dec 15------------------------------------------------------------------------------ 1C-Bitrix
• [KIS-2025-07] Bitrix24 <= 25.100.300 (Translate Module) Remote Code Execution Vulnerability December 16, 2025
  Posted by Egidio Romano on Dec 15----------------------------------------------------------------------------- Bitrix24
• nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality December 16, 2025
  Posted by Onur Tezcan via Fulldisclosure on Dec 15 [Attack Vectors]       > It was identified Cross-Site Request Forgery (CSRF) vulnerability on the "Run now" button of Schedule tasks functionality. Exploiting this vulnerability, an attacker can run a scheduled task without the victim users consent or knowledge. Assigned CVE code:       > CVE-2025-65593 [Discoverer]       > AlterSec t/a […]
• nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality December 16, 2025
  Posted by Onur Tezcan via Fulldisclosure on Dec 15 [Attack Vectors]       > It was detected that multiple Stored Cross-Site Scripting (Stored XSS) vulnerabilities in the product management functionality. Malicious JavaScript payloads inserted into the "Product Name" and "Short Description" fields are stored in the backend database and executed automatically whenever a user (administrator or customer) […]
• nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality. December 16, 2025
  Posted by Onur Tezcan via Fulldisclosure on Dec 15 [Attack Vectors]       > It was detected that a Stored XSS vulnerability on the "Currencies" functionality, specifically on the following input field: "Configuration > Currencies > Edit one of the currencies > "Custom formatting" input field. After saving the payload, the vulnerability can be triggered by visiting […]
• nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area December 16, 2025
  Posted by Onur Tezcan via Fulldisclosure on Dec 15 [Attack Vectors]       > It was detected that a Stored XSS vulnerability in the "Content Management" > "Blog posts" area. Malicious HTML/JavaScript added to the Body overview field of a blog post is stored in the backend and executes when the blog page is visited (http://localhost/blog/) Assigned […]