InfoSecBulletin Cybersecurity for mankind

Security researchers warn that hackers are exploiting a critical vulnerability in Wing FTP Server to gain control of affected systems. The vulnerability identified as CVE-2025-47812 can allow remote code execution at the root level due to a null byte and Lua injection issue, according to Huntress researchers. Huntress researchers noticed …

A severe vulnerability (CVE-2025-7503) has been found in an IP camera from Shenzhen Liandian Communication Technology LTD. With a CVSSv4 score of 10, this issue allows attackers root access via an undocumented Telnet service, threatening privacy and security. The vulnerability lies in the camera’s firmware (AppFHE1_V1.0.6.0) and its associated kernel …

Proof of concept exploits for a serious SQLi vulnerability in Fortinet FortiWeb have been released, allowing pre-authenticated remote code execution on vulnerable servers. FortiWeb is a web application firewall (WAF) that protects web applications from harmful HTTP traffic and threats. The FortiWeb vulnerability, rated 9.8/10 in severity, is identified as …