Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      tRPC vs GraphQL vs REST: Choosing the right API design for modern web applications

      June 26, 2025

      Jakarta EE 11 Platform launches with modernized Test Compatibility Kit framework

      June 26, 2025

      Can Good UX Protect Older Users From Digital Scams?

      June 25, 2025

      Warp 2.0 evolves terminal experience into an Agentic Development Environment

      June 25, 2025

      The top 4 Bluetooth speakers I’m taking everywhere this summer (including a surprise pick)

      June 27, 2025

      Your Android phone is getting a big security upgrade for free – here’s what’s new

      June 27, 2025

      How a 5-minute circuit scan saved me hundreds (and exposed a serious wiring surprise)

      June 27, 2025

      Using AI saves teachers ‘six weeks per year,’ Gallup poll finds – but at what cost?

      June 27, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      billboard.js 3.16.0 release: ✨ bar trending line & improved resizing performance!

      June 27, 2025
      Recent

      billboard.js 3.16.0 release: ✨ bar trending line & improved resizing performance!

      June 27, 2025

      ISO 20022 – End of MT Coexistence for Cash Instructions Fast Approaching

      June 27, 2025

      Building Trust and Shaping the Future: Implementing Responsible AI – Part 2

      June 27, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Windows 11 KB5060826 fixes slow Search, direct download links

      June 27, 2025
      Recent

      Windows 11 KB5060826 fixes slow Search, direct download links

      June 27, 2025

      Rilasciata Tails 6.17: Più Privacy e Sicurezza con le Nuove Funzionalità

      June 27, 2025

      Rilasciata Deepin 25: La distribuzione GNU/Linux immutabile con assistente vocale e pacchetti universali

      June 27, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-30009 – SAP SRM Live Auction Cockpit Java Applet Remote Code Execution Vulnerability

    CVE-2025-30009 – SAP SRM Live Auction Cockpit Java Applet Remote Code Execution Vulnerability

    May 13, 2025

    CVE ID : CVE-2025-30009

    Published : May 13, 2025, 1:15 a.m. | 1 hour, 49 minutes ago

    Description : he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to execute malicious script in the victim�s browser. This vulnerability has low impact on confidentiality and integrity within the scope of that victim�s browser, with no effect on availability of the application

    Severity: 6.1 | MEDIUM

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-30010 – SAP SRM Java Applet Cross-Site Scripting (XSS)
    Next Article CVE-2025-26662 – Apache Data Services Management Console Cross-Site Scripting Vulnerability

    Related Posts

    Security

    Citrix Bleed 2 flaw now believed to be exploited in attacks

    June 27, 2025
    Security

    Over 1,000 SOHO Devices Hacked in China-linked LapDogs Cyber Espionage Campaign

    June 27, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    str0m is a Sans I/O WebRTC implementation

    Linux

    CVE-2025-5387 – JeeWMS File Handler Improper Access Controls Remote Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-5868 – RT-Thread Array Index Validation Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    ConnectWise customers get mysterious warning about ‘sophisticated’ nation-state hack

    Security

    Highlights

    CVE-2025-6475 – “SourceCodester Student Result Management System Cross Site Scripting Vulnerability”

    June 22, 2025

    CVE ID : CVE-2025-6475

    Published : June 22, 2025, 12:15 p.m. | 1 hour, 28 minutes ago

    Description : A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/manage_students of the component Manage Students Module. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

    Severity: 2.4 | LOW

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Europol Issues Public Alert: ‘We Will Never Call You’ as Phone and App Scams Surge

    May 8, 2025

    Mobile security: flaw allows hackers to read texts and listen to calls

    April 9, 2025

    Microsoft’s New CLI Text Editor Works Great on Ubuntu

    June 17, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.