The growing demand for cybersecurity and compliance services presents a great opportunity for Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) to offer virtual Chief Information Security Officer (vCISO) services—deliverin…
A vulnerability was found in ChurchCRM up to 5.13.0 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to sql injection.
This vulnerability is handled as CVE-2025-1134. The attack may be launched r…
A vulnerability has been found in ChurchCRM up to 5.13.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection.
This vulnerability is known as CVE-2025-1135. The attack can be l…
I’m using the Windows CNG API to create a TPM-stored (or MS KSP) RSA key and want to allow non-administrative users to access it. My goal is to generate a machine level key (non-exportable) which can be accessed without admin privileges by…
A vulnerability, which was classified as critical, was found in enituretechnology LTL Freight Quotes Plugin up to 4.2.10 on WordPress. Affected is an unknown function. The manipulation of the argument edit_id leads to sql injection.
This vulnerability…
I have two processes (A & B) running on a host. The machine also runs a NATS server. Process A is subscriber and process B is the publisher. The communication between A <-> NATS and NATS <-> B is protected with SSL. Each ce…
Users who are on the lookout for popular games were lured into downloading trojanized installers that led to the deployment of a cryptocurrency miner on compromised Windows hosts.
The large-scale activity has been codenamed StaryDobry by Russian cybers…
A vulnerability, which was classified as critical, has been found in ChurchCRM up to 5.13.0. This issue affects some unknown processing of the file EditEventAttendees.php. The manipulation of the argument EN_tyid leads to sql injection.
The iden…
A vulnerability classified as critical was found in ChurchCRM up to 5.13.0. This vulnerability affects the function EditEventAttendees. The manipulation of the argument EID leads to sql injection.
This vulnerability was named CVE-2025-1133. The attack…
A vulnerability classified as problematic has been found in adthrive Raptive Ads Plugin up to 3.6.3 on WordPress. This affects an unknown part. The manipulation of the argument poc leads to cross site scripting.
This vulnerability is uniquely identifi…
