Aggregator

关键词漏洞全球数百万台Linux系统（包括运行关键服务的系统）现存在一个易于利用的新型sudo漏洞，可能允许未

Готовы ли мы к появлению детей из пробирки?

用户在电脑上分别安装了Windows 11（用于游戏）和Windows 10（用于工作），但发现启动时Windows 10仍依赖于Windows 11的引导文件。尝试通过diskpart、创建EFI分区、bcdedit等方法隔离系统未果。

Маленький кусочек текста — масштабные последствия для всего интернета.

无WriteProcessMemory CreateRemoteThread实现shellcode注入 GhostWriting x64实现

毫无保留地呈现给各位师傅PE2Shellcode的实现，并将其开源到github上

作者测试了一款1260Wh便携式电源站，在12V DC输出下仅释放673Wh电量，低于预期。与230V AC逆变器相比，DC输出效率更低（53%）。

双向证书认证（也称为双向TLS或客户端证书认证）是一种安全机制，其中客户端（安卓应用）和服务器通过交换和验证彼此的证书来建立安全连接。与传统的单向TLS不同，双向TLS要求客户端也提供证书以便服务器验证其身份。

Думаешь, программа весом всего 700КБ не сможет опустошить твой кошелёк? Рискнёшь проверить?

任意文件覆盖导致任意代码执行 一处漏洞点的两个利用方式

BackWay 是一款简单小巧的 iPhone 应用（4 MB），通过拍摄照片并记录地理位置帮助用户标记当前位置。它适合当作旅行日志使用，也可作为导航工具（导航功能较弱）。由 Daily Sparks 开发者打造，专注于单一功能。

A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0. Affected is an unknown function of the file /admin/view_vacancy.php. The manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2025-7136. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /admin/ajax.php?action=save_vacancy. The manipulation of the argument ID leads to sql injection. The identification of this vulnerability is CVE-2025-7135. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=delete_application. The manipulation of the argument ID leads to sql injection. This vulnerability was named CVE-2025-7134. The attack can be initiated remotely. Furthermore, there is an exploit available.

针对某博客系统登录认证缺陷的代码审计

A vulnerability classified as problematic has been found in CodeAstro Online Movie Ticket Booking System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2025-7133. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Submit #605954 / VDB-315048

Submit #605953 / VDB-315047

Submit #605952 / VDB-315046