Aggregator

A vulnerability was found in D-Link DNS-320 and DNS-320LW and classified as critical. Affected by this issue is the function cgi_chg_admin_pw of the file account_mgr.cgi. The manipulation leads to privilege escalation. This vulnerability is handled as CVE-2025-44023. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in TOTOLINK A3100R 5.9c.1527. It has been rated as critical. This issue affects the function setMacFilterRules. The manipulation of the argument Comment leads to buffer overflow. The identification of this vulnerability is CVE-2025-45788. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in zenml-io ZenML up to 0.55.4. Affected is an unknown function of the file /api/v1/steps of the component Endpoint. The manipulation leads to path traversal: '\..\filename'. This vulnerability is traded as CVE-2024-2083. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Digi International Digi PortServer TS, Digi One SP, Digi One SP IA, Digi One IA and Digi One IAP. It has been rated as critical. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to improper authentication. The identification of this vulnerability is CVE-2025-3659. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic was found in Mattermost up to 8.1.11/9.5.2/9.6.0/9.7.0. This vulnerability affects unknown code of the component Request Path Handler. The manipulation leads to resource consumption. This vulnerability was named CVE-2024-22091. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Mattermost up to 8.1.11/9.4.4/9.5.2/9.6.0. This issue affects the function getSessions of the component API. The manipulation leads to resource consumption. The identification of this vulnerability is CVE-2024-4183. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in registry-support. It has been classified as problematic. This affects an unknown part of the component Decompression Handler. The manipulation leads to relative path traversal. This vulnerability is uniquely identified as CVE-2024-1485. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Alabama Ophthalmology Practice, California Dental Clinic Report Breaches
Cybercriminal gang BianLian claims to have stolen patient information in two recent hacks of an Alabama-based ophthalmology practice and a California dental clinic. The two incidents affected nearly 150,000 people and are among the extortion group's latest attacks on the healthcare sector.

Machine Learning, Generative AI Bolster Continuous User Authentication
Financial institutions can use AI-fueled behavioral biometrics for real-time identity assurance. By continuously profiling how users interact with devices, firms can shift from one-time authentication to real-time identity assurance, turning every click, pause and keystroke into a frontline defense.

Analysts Warn White House IT Plan Could Conflict With Deregulation Directives
Experts warn a new strategy that aims to centralize federal IT procurement under the General Services Administration with standardized terms and deep vendor discounts may actually undermine deregulation goals while excluding small vendors and clashing with agency-specific cybersecurity mandates.

Panasonicが提供するIR Control Hubには、不正なファームウェアのロードにつながる脆弱性が存在します。

下一站，再见。

大模型是当下科技创新的关键驱动力

下一站，再见。

大模型是当下科技创新的关键驱动力

下一站，再见。

大模型是当下科技创新的关键驱动力

A vulnerability has been found in Iwcn Stark CRM 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2014-10008. The attack can be launched remotely. Furthermore, there is an exploit available.

苹果将推出配备摄像头的 AirPods 和 Apple Watch；特斯拉升级「家长控制」功能，支持设定最高速度；上海杨浦区对 UP 主购买最高补贴 200 万元。

苹果将推出配备摄像头的 AirPods 和 Apple Watch；特斯拉升级「家长控制」功能，支持设定最高速度；上海杨浦区对 UP 主购买最高补贴 200 万元。