Aggregator

Дезинформация, психоз и отсутствие правил превращают технологию в угрозу.

Electronics manufacturer Data I/O reports a ransomware attack to SEC, the company was forced to take offline operational systems. Electronics manufacturer Data I/O reported a ransomware attack to the US Securities and Exchange Commission (SEC). The company was forced to take offline operational systems following the attack. Data I/O is a leading provider of manual […]

A vulnerability classified as problematic was found in LinuxServer.io Heimdall 2.6.3-ls307. Affected by this vulnerability is an unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-Host/Referer results in open redirect. This vulnerability was named CVE-2025-50578. The attack may be performed from a remote location. In addition, an exploit is available.

A vulnerability has been found in Cursor up to 1.3.8 and classified as critical. Impacted is an unknown function of the file vscode/settings.json of the component Setting Handler. Performing manipulation results in improper authorization. This vulnerability is identified as CVE-2025-54130. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Cursor up to 1.3.8 and classified as critical. The affected element is an unknown function of the file /.Cursor/mcp.json of the component MCP File Parser. Executing manipulation can lead to os command injection. This vulnerability is tracked as CVE-2025-54135. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability has been found in AOMEI Cyber Backup and classified as critical. Affected by this vulnerability is an unknown functionality. Performing manipulation results in missing authentication. This vulnerability is reported as CVE-2025-8610. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. This vulnerability is tracked as CVE-2025-9298. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability, which was classified as problematic, has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /customer/my_account.php?edit_account of the component Edit Your Account Page. Performing manipulation of the argument Username results in cross site scripting. This vulnerability is cataloged as CVE-2025-9237. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability identified as critical has been detected in Cursor up to 1.2. This affects an unknown function of the component Model Context Protocol. Performing manipulation results in os command injection. This vulnerability is cataloged as CVE-2025-54133. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability classified as critical has been found in Cursor up to 1.2. Affected by this issue is some unknown functionality. This manipulation causes command injection. This vulnerability appears as CVE-2025-54131. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Cursor up to 1.2.4. Affected by this vulnerability is an unknown functionality. The manipulation results in os command injection. This vulnerability is reported as CVE-2025-54136. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, was found in Microsoft Windows. Affected by this issue is some unknown functionality of the component Routing/Remote Access Service. The manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2025-49663. The attack can be launched remotely. No exploit exists. It is advisable to implement a patch to correct this issue.

为减少噪音问题,已关闭自我发帖功能,改为每周统一的问题讨论线程,欢迎在此提问,具体工具或目标问题请前往StackExchange或Reddit相关版块咨询。

August 25, 2025, marks the 34th anniversary of Linux, a project that began as a modest hobby and has grown into the bedrock of modern digital infrastructure. On this day in 1991, 21-year-old Finnish student Linus Torvalds posted to the comp.os.minix newsgroup: “I’m doing a (free) operating system (just a hobby, won’t be big and […]

The post Happy Birthday Linux! 34 Years of Open-Source Power appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in OpenSSL up to 0.9.7. It has been declared as critical. This vulnerability affects the function ssl3_get_record of the file s3_pkt.c of the component Block Cipher Padding. The manipulation results in missing encryption of sensitive data. This vulnerability is identified as CVE-2003-0078. The attack can be executed remotely. Additionally, an exploit exists. It is recommended to upgrade the affected component.

A vulnerability identified as critical has been detected in Apache HTTP Server up to 1.3.24/2.0.45. This vulnerability affects unknown code of the component Escape Character Handler. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2003-0083. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. You should upgrade the affected component.

A vulnerability classified as critical has been found in Red Hat Linux 2.1. The affected element is an unknown function of the component mod_auth_any. The manipulation leads to improper privilege management. This vulnerability is documented as CVE-2003-0084. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A cybersecurity researcher has unveiled a sophisticated new method for extracting Windows credentials and secrets that successfully evades detection by most Endpoint Detection and Response (EDR) solutions currently deployed in enterprise environments. The technique, dubbed “Silent Harvest,” leverages obscure Windows APIs to access sensitive registry data without triggering common security alerts. The breakthrough represents a […]

The post Hackers Steal Windows Secrets and Credentials Undetected by EDR Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Перовскитовые панели научились работать от обычной лампочки.

The National Institute of Standards and Technology (NIST) has formally published Special Publication 800-232, “Ascon-Based Lightweight Cryptography Standards for Constrained Devices,” establishing the first U.S. government benchmark for efficient cryptographic algorithms tailored to resource-constrained environments such as the Internet of Things (IoT), embedded systems, and low-power sensors. In February 2023, NIST selected the Ascon family […]

The post NIST Releases Lightweight Cryptography Standard for IoT Security appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.