Aggregator

Как китайскому автогиганту удалось обогнать Tesla на годы.

关键词数据泄露一个名为“rose87168”的威胁行为者声称从 Oracle 云服务器窃取了 600 万条记录

关键词零日漏洞俄罗斯漏洞经纪公司 Operation Zero 已公开宣布为 Telegram 零日漏洞提供高

关键词个人信息“开盒”是互联网中一种隐秘而危险的黑产，源于贴吧文化，类似于人肉搜索。

Currently trending CVE - Hype Score: 1 - IBM AIX 7.2 and 7.3 nimesis NIM master service could allow a remote attacker to execute arbitrary commands due to improper process controls.

Какие меры против нелегальных трансляций примет техногигант?

Name: FooBar CTF 2025 (an FooBarCTF event.)
Date: March 22, 2025, 6:30 a.m. — 23 March 2025, 06:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://foobarctf.nitdgplug.org/
Rating weight: 35.73
Event organizers: Alchemists of Kernel

A vulnerability classified as critical has been found in Autodesk AutoCAD. Affected is an unknown function of the component STEP File Parsing. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2024-23147. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Autodesk AutoCAD and classified as critical. This vulnerability affects unknown code of the component X_B File Parser. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-23143. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Autodesk AutoCAD. Affected by this issue is some unknown functionality of the component X_B File Parser. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2024-23146. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Autodesk AutoCAD. This affects an unknown part of the component X_B File Parser. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2024-23146. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Autodesk AutoCAD. Affected by this vulnerability is an unknown functionality of the component SLDDRW File Parser. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2024-23149. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Autodesk AutoCAD and classified as critical. This issue affects some unknown processing of the component 3DM File Parser. The manipulation leads to out-of-bounds read. The identification of this vulnerability is CVE-2024-23143. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Autodesk AutoCAD. It has been classified as critical. Affected is an unknown function of the component 3DM File Parser. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-23143. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Autodesk AutoCAD. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component CATPRODUCT File Parser. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2024-37006. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in yiisoft Yii2 up to 2.0.39. This affects the function Generate of the file phpunit\src\Framework\MockObject\MockClass.php. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2025-2690. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in yiisoft Yii2 up to 2.0.45. Affected by this issue is the function getIterator of the file symfony\finder\Iterator\SortableIterator.php. The manipulation leads to deserialization. This vulnerability is handled as CVE-2025-2689. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in TOTOLINK A3000RU up to 5.9c.5185. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ExportSyslog.sh of the component Syslog Configuration File Handler. The manipulation leads to improper access controls. This vulnerability is known as CVE-2025-2688. The attack needs to be done within the local network. Furthermore, there is an exploit available.

Submit #521718 / VDB-300711

Submit #521709 / VDB-300710