Company Name: Mozilla Company HackerOne URL: https://hackerone.com/mozilla Submitted By:treinLink to Submitters Profile:https://hackerone.com/trein Report Title:Mozilla VPN Clients: RCE via file write...
Ransomware Group: SECUROTROP VICTIM NAME: Tiger Communications NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
Ransomware Group: AKIRA VICTIM NAME: Druni NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Ransomware Group: AKIRA VICTIM NAME: Hertz Farm Management NOTE: No files or stolen information are by RedPacket Security. Any legal...
Ransomware Group: AKIRA VICTIM NAME: Mount Vernon Property Management NOTE: No files or stolen information are by RedPacket Security. Any...
Vulnerability Summary: CVE-2025-54527 In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allows popups to...
Vulnerability Summary: CVE-2025-50494 Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to...
Vulnerability Summary: CVE-2024-49342 IBM Informix Dynamic Server 12.10 and 14.10 uses an inadequate account lockout setting that could allow a...
Vulnerability Summary: CVE-2025-54528 In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow Affected Endpoints: No...
Vulnerability Summary: CVE-2025-50493 Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to...
Vulnerability Summary: CVE-2025-50490 Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to...
Vulnerability Summary: CVE-2025-54532 In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies Affected...
Vulnerability Summary: CVE-2025-54531 In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows Affected Endpoints: No...
Vulnerability Summary: CVE-2025-54530 In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions Affected Endpoints: No...
Vulnerability Summary: CVE-2025-54529 In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration Affected Endpoints: No...
Vulnerability Summary: CVE-2025-54537 In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots Affected Endpoints:...
Vulnerability Summary: CVE-2025-54536 In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint Affected Endpoints: No affected endpoints...
Vulnerability Summary: CVE-2025-54533 In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration Affected...
Vulnerability Summary: CVE-2025-54534 In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page Affected Endpoints: No affected...
Vulnerability Summary: CVE-2025-54535 In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms Affected...
Vulnerability Summary: CVE-2025-54538 In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command...
Vulnerability Summary: CVE-2025-50489 Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to...
Vulnerability Summary: CVE-2025-50492 Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute...
Vulnerability Summary: CVE-2025-50491 Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to...
