Aggregator

思科警告：IOS XR软件BGP联盟漏洞（CVE-2025-20115）可能导致全网拒绝服务，攻击者可利用精心构造的BGP更新消息触发内存损坏，建议立即更新或实施临时缓解措施。

A devastating new remote code execution (RCE) vulnerability, CVE-2025-24813, is now actively exploited in the wild. Attackers need just one PUT API request to take over vulnerable Apache Tomcat servers. The exploit, originally published by a Chinese forum user iSee857, is already available online: CVE-2025-24813 PoC by iSee857. Exploit Breakdown: How a Simple PUT Request [...]

The post One PUT Request to Own Tomcat: CVE-2025-24813 RCE is in the Wild appeared first on Wallarm.

The post One PUT Request to Own Tomcat: CVE-2025-24813 RCE is in the Wild appeared first on Security Boulevard.

1. RansomHouse勒索团伙公布了新的受害公司 2. Cactus勒索团伙公布了新的受害公司 3. Qilin勒索团伙公布了新的受害公司

1. RansomHouse勒索团伙公布了新的受害公司 2. Cactus勒索团伙公布了新的受害公司 3. Qilin勒索团伙公布了新的受害公司

1. RansomHouse勒索团伙公布了新的受害公司 2. Cactus勒索团伙公布了新的受害公司 3. Qilin勒索团伙公布了新的受害公司

1. RansomHouse勒索团伙公布了新的受害公司 2. Cactus勒索团伙公布了新的受害公司 3. Qilin勒索团伙公布了新的受害公司

1. RansomHouse勒索团伙公布了新的受害公司 2. Cactus勒索团伙公布了新的受害公司 3. Qilin勒索团伙公布了新的受害公司

1. RansomHouse勒索团伙公布了新的受害公司 2. Cactus勒索团伙公布了新的受害公司 3. Qilin勒索团伙公布了新的受害公司

1. RansomHouse勒索团伙公布了新的受害公司 2. Cactus勒索团伙公布了新的受害公司 3. Qilin勒索团伙公布了新的受害公司

1. RansomHouse勒索团伙公布了新的受害公司 2. Cactus勒索团伙公布了新的受害公司 3. Qilin勒索团伙公布了新的受害公司

QR code Phishing, or “Quishing,” is a cyber threat that exploits the widespread use of QR (Quick Response) codes in phishing attacks.  Quishing takes advantage of the recent high-use volume and increasing popularity of QR codes. These codes, which can be easily scanned using smartphones, are commonly seen as innocent and have become a widely […]

The post What is QR Code Phishing? (Quishing) – Attack & Prevention Guide in 2025 appeared first on Cyber Security News.

总结推荐本周的热点资讯、一周好文，保证大家不错过本周的每一个重点！

Currently trending CVE - Hype Score: 1 - TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was ...