Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      How To Prevent WordPress SQL Injection Attacks

      June 12, 2025

      Java never goes out of style: Celebrating 30 years of the language

      June 12, 2025

      OpenAI o3-pro available in the API, BrowserStack adds Playwright support for real iOS devices, and more – Daily News Digest

      June 12, 2025

      Creating The “Moving Highlight” Navigation Bar With JavaScript And CSS

      June 11, 2025

      Surface Pro 11 with Snapdragon X Elite drops to lowest price ever

      June 12, 2025

      With WH40K Boltgun and Dungeons of Hinterberg, this month’s Humble Choice lineup is stacked for less than $12

      June 12, 2025

      I’ve been loving the upgrade to my favorite mobile controller, and there’s even a version for large tablets

      June 12, 2025

      Copilot Vision just launched — and Microsoft already added new features

      June 12, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      Master Data Management: The Key to Improved Analytics Reporting

      June 12, 2025
      Recent

      Master Data Management: The Key to Improved Analytics Reporting

      June 12, 2025

      Salesforce Lead-to-Revenue Management

      June 12, 2025

      React Native 0.80 – React 19.1, JS API Changes, Freezing Legacy Arch and much more

      June 12, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Surface Pro 11 with Snapdragon X Elite drops to lowest price ever

      June 12, 2025
      Recent

      Surface Pro 11 with Snapdragon X Elite drops to lowest price ever

      June 12, 2025

      With WH40K Boltgun and Dungeons of Hinterberg, this month’s Humble Choice lineup is stacked for less than $12

      June 12, 2025

      I’ve been loving the upgrade to my favorite mobile controller, and there’s even a version for large tablets

      June 12, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-27580 – NIH BRICS Privilege Escalation and Account Compromise Vulnerability

    CVE-2025-27580 – NIH BRICS Privilege Escalation and Account Compromise Vulnerability

    April 23, 2025

    CVE ID : CVE-2025-27580

    Published : April 24, 2025, 12:15 a.m. | 2 hours, 44 minutes ago

    Description : NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates predictable tokens (that depend on username, time, and the fixed 7Dl9#dj- string) and thus allows unauthenticated users with a Common Access Card (CAC) to escalate privileges and compromise any account, including administrators.

    Severity: 7.5 | HIGH

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-27581 – NIH BRICS Unauthenticated Access to InET Module
    Next Article CVE-2025-25046 – IBM InfoSphere Information Server DataStage Flow Designer Information Disclosure

    Related Posts

    Security

    Graphite Spyware Exploits Apple iOS Zero-Click Vulnerability to Attack Journalists

    June 13, 2025
    Security

    PoC Exploit Released for Critical WebDAV 0-Day RCE Vulnerability Exploited by APT Hackers

    June 13, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2024-48848 – Aspect Disk Overutilization Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Build Digital Assets & Earn Through Referrals with Biela — A Genuine Opportunity for Entrepreneurs

    Development

    I tested these new Shokz clip-on earbuds, and they give Bose’s Ultra Open a run for their money

    News & Updates

    AI for Sustainability: How Smart Technology Is Powering the Green Revolution🌱

    Web Development

    Highlights

    Steps to improve your charity website’s navigation

    May 2, 2025

    Clear navigation is key to a great charity website. In this post, we’ll share five…

    Editor’s Soapbox: AI: The Bad, the Worse, and the Ugly

    May 7, 2025

    Microsoft says Edge 134 is the fastest version of the browser ever

    April 14, 2025

    CVE-2025-3458 – WordPress Ocean Extra Stored Cross-Site Scripting Vulnerability

    April 22, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.