Aggregator

Submit #553703 / VDB-305609

Submit #553547 / VDB-305608

A vulnerability, which was classified as critical, was found in Imagination Graphics DDK up to 24.3 RTM. This affects an unknown part. The manipulation leads to use of out-of-range pointer offset. This vulnerability is uniquely identified as CVE-2025-0467. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Submit #553649 / VDB-240140

A vulnerability, which was classified as problematic, has been found in TP-Link TL-WR841N up to 4.19. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-25427. The attack may be launched remotely. There is no exploit available.

近期，网络安全界被一则消息炸开了锅—— 一款名为AkiraBot的Python框架能绕过CAPTCHA（全自动 […]

HackerNews 编译，转载请注明出处： 美国网络安全和基础设施安全局（CISA）于周三将一个影响SonicWall Secure Mobile Access（SMA）100系列网关的安全漏洞添加至其”已知被利用漏洞（KEV）目录”，基于此漏洞正被活跃利用的证据。 该高危漏洞编号为CVE-2021-20035（CVSS评分：7.2），属于操作系统命令注入漏洞，可能导致代码执行。 “SMA100管理界面未能正确过滤特殊元素，使得远程认证攻击者能以’nobody’用户身份注入任意命令，可能导致代码执行。”SonicWall在2021年9月发布的公告中表示。该漏洞影响以下版本设备：SMA 200、SMA 210、SMA 400、SMA 410及SMA 500v（ESX、KVM、AWS、Azure）型号。 受影响版本包括： 10.2.1.0-17sv及更早版本（10.2.1.1-19sv及以上版本已修复） 10.2.0.7-34sv及更早版本（10.2.0.8-37sv及以上版本已修复） 9.0.0.10-28sv及更早版本（9.0.0.11-31sv及以上版本已修复） 尽管目前尚不清楚CVE-2021-20035漏洞被利用的具体细节，但SonicWall已更新公告指出”该漏洞可能正在现实中被利用”。 根据要求，联邦民事行政部门（FCEB）机构必须在2025年5月7日前采取必要的缓解措施，以保护其网络免受主动威胁。     消息来源：thehackernews； 本文由 HackerNews.cc 翻译整理，封面来源于网络；  转载请注明“转自 HackerNews.cc”并附上原文

Kimsuky攻击活动利用RDP漏洞与恶意软件实施定向渗透；APT29 再次针对欧洲外交官发起网络钓鱼攻击；Slow Pisces 使用新的定制 Python 恶意软件瞄准开发者；DarkHotel 组织最新 RPC 攻击组件披露

Kimsuky攻击活动利用RDP漏洞与恶意软件实施定向渗透；APT29 再次针对欧洲外交官发起网络钓鱼攻击；Slow Pisces 使用新的定制 Python 恶意软件瞄准开发者；DarkHotel 组织最新 RPC 攻击组件披露

Windows漏洞CVE-2025-24054遭活跃利用，攻击者通过文件下载窃取NTLM凭据！

Hobbits Hobbits is a software platform for analyzing, processing and visualizing bits. The Hobbits GUI is the central tool of the platform and will be the primary focus of this document. The Hobbits Runner...

The post hobbits: multi-platform GUI for bit-based analysis, processing, and visualization appeared first on Penetration Testing Tools.

Nemesis Nemesis is an offensive data enrichment pipeline and operator support system. Built on Kubernetes with scale in mind, our goal with Nemesis was to create a centralized data processing platform that ingests data...

The post Nemesis: An offensive data enrichment pipeline appeared first on Penetration Testing Tools.

上一年雖然止步於初賽，但之後找了時間復現了一下決賽，大概花了2、3周才復現完( 還是在有文章參考的情況下 )，內容很多，大致包括保護分析、vm分析、透視、自瞄實現。今年的決賽比較不同，他給了2種外掛，考察的是外掛功能的分析和外掛檢測，如下圖

上一年雖然止步於初賽，但之後找了時間復現了一下決賽，大概花了2、3周才復現完( 還是在有文章參考的情況下 )，內容很多，大致包括保護分析、vm分析、透視、自瞄實現。今年的決賽比較不同，他給了2種外掛，考察的是外掛功能的分析和外掛檢測，如下圖

APT组织Lazarus 在Rootkit（获取内核权限）攻击中使用了微软的0day漏洞;APT组织Kimsuky利用软件公司产品安装程序进行伪装展开攻击;NoName057(16)组织DDoSia项目持续更新;

APT组织Lazarus 在Rootkit（获取内核权限）攻击中使用了微软的0day漏洞;APT组织Kimsuky利用软件公司产品安装程序进行伪装展开攻击;NoName057(16)组织DDoSia项目持续更新;

Canadian Cyber Agency Warns of Rising Chinese Cyberthreats.
The Canadian Center for Cybersecurity on Tuesday said it has observed "increasing levels" of malicious cyberactivity from China-linked hackers, including the group tracked Salt Typhoon. Exposed edge devices are at risk of attacks can be detected through mass scanning.

Researchers Say Chinese Mobile Route Firms Dominate Global Interconnect Industry
A report warns U.S. allies and countries across the globe are using Chinese-owned and controlled mobile routing firms in a move that could risk national security interests and potentially expose billions of users to passive and active surveillance from Beijing.

Case Resolves HHS OCR Scrutiny of Two Security Incidents
A Guam public hospital has agreed to pay federal regulators $25,000 and implement a corrective action plan to settle potential HIPAA violations - including a failure to conduct a comprehensive risk analysis - identified during an investigation into two security incidents.