nicdex @nicdex

Recent searches

Search options

Only available when logged in.

138 posts8 participants9 posts today

**Daily-CVE** @CyberSignaler@mastodon.social · 5h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3545 - H3C Magic NX Series HTTP POST Request Handler Command Injection Vulnerability April 14, 2025 at 02:15AM https://ift.tt/9jgK3wk #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 8hCVE-2025-3545 - H3C Magic NX Series HTTP POST Request Handler Command Injection VulnerabilityA vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been classified as critical. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/setLanguage of the component HTTP POST Request Handler. The manipulation leads to command injection. The …

**Daily-CVE** @CyberSignaler@mastodon.social · 5h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3546 - H3C Magic NX15/Business Ethernet Switch HTTP Command Injection Vulnerability April 14, 2025 at 02:15AM https://ift.tt/58ovOkw #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 8hCVE-2025-3546 - H3C Magic NX15/Business Ethernet Switch HTTP Command Injection VulnerabilityA vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getLanguage of the component HTTP POST Request Handler. The manipulation leads to …

**Daily-CVE** @CyberSignaler@mastodon.social · 7h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3544 - H3C Magic NX15/30 Pro/400/BE18000 HTTP POST Request Handler Command Injection April 14, 2025 at 01:15AM https://ift.tt/cDj8NkG #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 9hCVE-2025-3544 - H3C Magic NX15/30 Pro/400/BE18000 HTTP POST Request Handler Command InjectionA vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getCapabilityWeb of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to …

**Daily-CVE** @CyberSignaler@mastodon.social · 7h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3543 - H3C Magic NX Series HTTP POST Request Handler Command Injection Vulnerability April 14, 2025 at 01:15AM https://ift.tt/qO42XYk #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 9hCVE-2025-3543 - H3C Magic NX Series HTTP POST Request Handler Command Injection VulnerabilityA vulnerability has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014 and classified as critical. This vulnerability affects the function FCGI_WizardProtoProcess of the file /api/wizard/setsyncpppoecfg of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the …

**Daily-CVE** @CyberSignaler@mastodon.social · 7h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3542 - H3C Magic NX15, Magic NX400 and Magic R3010 Command Injection Vulnerability April 14, 2025 at 12:15AM https://ift.tt/pV0BhjK #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 10hCVE-2025-3542 - H3C Magic NX15, Magic NX400 and Magic R3010 Command Injection VulnerabilityA vulnerability, which was classified as critical, was found in H3C Magic NX15, Magic NX400 and Magic R3010 up to V100R014. This affects the function FCGI_WizardProtoProcess of the file /api/wizard/getsyncpppoecfg of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be initiated within …

**Daily-CVE** @CyberSignaler@mastodon.social · 9h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3541 - H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 Command Injection Vulnerability April 13, 2025 at 11:15PM https://ift.tt/ZtRJiy0 #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 11hCVE-2025-3541 - H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 Command Injection VulnerabilityA vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this issue is the function FCGI_WizardProtoProcess of the file /api/wizard/getSpecs of the component HTTP POST Request Handler. The manipulation leads to command injection. …

**Daily-CVE** @CyberSignaler@mastodon.social · 9h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3540 - H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 Command Injection Vulnerability April 13, 2025 at 11:15PM https://ift.tt/MLxV4a5 #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 11hCVE-2025-3540 - H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 Command Injection VulnerabilityA vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this vulnerability is the function FCGI_WizardProtoProcess of the file /api/wizard/getCapability of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can …

**Daily-CVE** @CyberSignaler@mastodon.social · 9h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3539 - H3C Magic NX Series HCF CGI Command Injection Vulnerability April 13, 2025 at 10:15PM https://ift.tt/gOKb7T2 #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 12hCVE-2025-3539 - H3C Magic NX Series HCF CGI Command Injection VulnerabilityA vulnerability classified as critical has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getBasicInfo of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can …

**Daily-CVE** @CyberSignaler@mastodon.social · 9h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3445 - Apache Archiver Path Traversal Zip Slip Vulnerability April 13, 2025 at 10:15PM https://ift.tt/U56kre0 #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 12hCVE-2025-3445 - Apache Archiver Path Traversal Zip Slip VulnerabilityA Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the archiver.Unarchive functionality with ZIP files, like this: archiver.Unarchive(zipFile, …

**Daily-CVE** @CyberSignaler@mastodon.social · 13h

13h

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3538 - D-Link jhttpd Auth Asp Stack-Based Buffer Overflow April 13, 2025 at 07:15PM https://ift.tt/I5QLjvJ #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 15hCVE-2025-3538 - D-Link jhttpd Auth Asp Stack-Based Buffer OverflowA vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The attack needs to be approached within the local network. The …

**Daily-CVE** @CyberSignaler@mastodon.social · 2d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3418 - WordPress WPC Admin Columns Privilege Escalation Vulnerability April 12, 2025 at 07:15AM https://ift.tt/pZYt96J #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 2dCVE-2025-3418 - WordPress WPC Admin Columns Privilege Escalation VulnerabilityThe WPC Admin Columns plugin for WordPress is vulnerable to privilege escalation in versions 2.0.6 to 2.1.0. This is due to the plugin not properly restricting user meta values that can be updated through the ajax_edit_save() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to …

**Daily-CVE** @CyberSignaler@mastodon.social · 2d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-32367 - Oz Forensics Face Recognition IDOR April 11, 2025 at 05:15PM https://ift.tt/fStANqE #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 2dCVE-2025-32367 - Oz Forensics Face Recognition IDORThe Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions.

**Daily-CVE** @CyberSignaler@mastodon.social · 2d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2023-42970 - Apple Safari Use-After-Free Arbitrary Code Execution April 11, 2025 at 03:15PM https://ift.tt/E6iJ2AW #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 2dCVE-2023-42970 - Apple Safari Use-After-Free Arbitrary Code ExecutionA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution.

**Daily-CVE** @CyberSignaler@mastodon.social · 2d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-3439 - Everest Forms WordPress PHP Object Injection Vulnerability April 11, 2025 at 01:15PM https://ift.tt/uF68ro5 #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 2dCVE-2025-3439 - Everest Forms WordPress PHP Object Injection VulnerabilityThe Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.1 via deserialization of untrusted input from the 'field_value' parameter. This makes it possible for unauthenticated attackers to inject …

**rec-on.org** @REConSOUND@mastodon.social · 2d

rec-on.org @REConSOUND@mastodon.social

Population living in slums (% of urban population)

https://data.worldbank.org/indicator/EN.POP.SLUM.UR.ZS?most_recent_value_desc=true

#recon: on #poverty
agf & porya hatami
► https://rec-on.org/onpoverty.html

the poem & reader
https://pad.riseup.net/p/recononpoverty-keep

World Bank Open DataWorld Bank Open DataFree and open access to global development data

**Daily-CVE** @CyberSignaler@mastodon.social · 2d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-23391 - SUSE Rancher Privilege Escalation Vulnerability April 11, 2025 at 11:15AM https://ift.tt/DJYnXrb #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 2dCVE-2025-23391 - SUSE Rancher Privilege Escalation VulnerabilityA Incorrect Privilege Assignment vulnerability in SUSE rancher allows a Restricted Administrator to change the password of Administrators and take over their accounts. This issue affects rancher: from 2.8.0 before 2.8.14, from 2.9.0 before 2.9.8, from 2.10.0 before 2.10.4.

**Daily-CVE** @CyberSignaler@mastodon.social · 2d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-23389 - SUSE Rancher SAML Impersonation Access Control Vulnerability April 11, 2025 at 11:15AM https://ift.tt/hLzQ3eT #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 2dCVE-2025-23389 - SUSE Rancher SAML Impersonation Access Control VulnerabilityA Improper Access Control vulnerability in SUSE rancher allows a local user to impersonate other identities through SAML Authentication on first login. This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.

**Daily-CVE** @CyberSignaler@mastodon.social · 2d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-23388 - SUSE Rancher Stack-based Buffer Overflow Denial of Service April 11, 2025 at 11:15AM https://ift.tt/ojahStd #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 2dCVE-2025-23388 - SUSE Rancher Stack-based Buffer Overflow Denial of ServiceA Stack-based Buffer Overflow vulnerability in SUSE rancher allows for denial of service.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.

**Daily-CVE** @CyberSignaler@mastodon.social · 2d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-31932 - BizRobo RCE via Deserialization April 11, 2025 at 10:15AM https://ift.tt/MGeyLRO #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 3dCVE-2025-31932 - BizRobo RCE via DeserializationDeserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console. The vendor provides the workaround information and recommends to apply it to the deployment environment.

**Daily-CVE** @CyberSignaler@mastodon.social · 2d

Daily-CVE @CyberSignaler@mastodon.social

CVE-2025-32681 - WordPress Guru SQL Injection Vulnerability April 11, 2025 at 09:15AM https://ift.tt/YGx2Vvy #CVE #IOC #CTI #ThreatIntelligence #ThreatIntel #Cybersecurity #Recon

cvefeed.io · 3dCVE-2025-32681 - WordPress Guru SQL Injection VulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Guru Error Log Viewer allows Blind SQL Injection. This issue affects Error Log Viewer: from n/a through 1.0.5.

Drag & drop to upload

Recent searches

Search options

Administered by:

Server stats:

#recon