Aggregator

近日，Goby安全研究团队发现Clash verge 两个RCE漏洞：4月28日，Clash verge RC

A vulnerability was found in VMware Spring Security up to 6.4.5 and classified as critical. Affected by this issue is some unknown functionality of the component Aspects. The manipulation leads to authorization bypass. This vulnerability is handled as CVE-2025-41232. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Security Operations Centers (SOCs) are under constant pressure to detect threats faster, respond more effectively, and reduce operational noise. Metrics like Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), False Positive Rate (FPR), and True Positive Rate (TPR) are more than just numbers — they define the health and impact of a business […]

The post How SOC Teams Improve Mean Time to Detect and Other KPIs with Threat Intelligence Feeds appeared first on ANY.RUN's Cybersecurity Blog.

A vulnerability has been found in Kingdee Cloud Galaxy Private Cloud BBC System up to 9.0 Patch April 2025 and classified as critical. Affected by this vulnerability is the function BaseServiceFactory.getFileUploadService.deleteFileAction of the file fileUpload/deleteFileAction.jhtml of the component File Handler. The manipulation of the argument filePath leads to path traversal. This vulnerability is known as CVE-2025-5029. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Исследование: нейросети помогают… но скорее работодателям, чем вам.

Submit #570956 / VDB-309847

网络空间是亿万民众共同的精神家园，网络空间天朗气清、生态良好，符合人民利益。加强网络空间法治建设，是全面依法治国的重要内容，是维护国家网络空间主权和安全的必然要求，是保障人民群众网络空间合法权益的迫切需要，是促进数字经济健康发展的重要保障。

近日，由移动智能终端、应用程序和应用商店三方协同改造的“未成年人模式”正式发布上线。

美商务部近日发布指南，以所谓推定违反美出口管制为由，企图在全球禁用中国先进计算芯片，包括特定的华为昇腾芯片。美方措施是典型的单边霸凌和保护主义做法，严重损害全球半导体产业链供应链稳定，剥夺其他国家发展先进计算芯片和人工智能等高科技产业的权利

NIST和CISA号召行业协作

速修复

A vulnerability was found in SQLite up to 3.32.2. It has been declared as critical. This vulnerability affects the function multiSelectOrderBy of the file select.c of the component Query Optimizer. The manipulation leads to out-of-bounds write. This vulnerability was named CVE-2020-15358. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Apple macOS up to 11.1. This affects an unknown part of the component SQLite. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2020-15358. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in SQLite up to 3.31.x. It has been rated as critical. This issue affects the function fts3EvalNextRow of the file ext/fts3/fts3.c of the component Snippet Handler. The manipulation leads to use after free. The identification of this vulnerability is CVE-2020-13630. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in SQLite up to 3.31.x. Affected by this vulnerability is the function matchinfo of the file ext/fts3/fts3_snippet.c. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2020-13632. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple iCloud up to 11.4 on Windows. It has been classified as critical. Affected is an unknown function of the component SQLite. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2020-13630. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Oracle Communications Cloud Native Core Policy 1.14.0. Affected by this vulnerability is an unknown functionality of the component Policy. The manipulation leads to denial of service. This vulnerability is known as CVE-2020-13434. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.