Aggregator

Submit #855115 / VDB-377896

Submit #855114 / VDB-377895

Submit #855110 / VDB-377894

An alleged Ryuk ransomware member pleaded guilty in the U.S. for helping deploy attacks on American companies and faces up to 15 years in prison. Armenian national Karen Serobovich Vardanyan (34) pleaded guilty in the U.S. for his role in Ryuk ransomware attacks targeting American organizations between 2019 and 2020. Extradited from Ukraine after his […]

Anthropic has just extended access to Claude Fable 5 for paid subscribers until July 19, giving you another week to keep using the most powerful model. [...]

本文记录了 HackTheBox 靶机 OneTwoSeven 的完整渗透过程。攻击链从端口扫描与 Web 信息搜集开始，发现目标开放 SSH、HTTP 以及仅允许本地访问的 60080 管理端口。随后利用 SFTP 提供的软链接功能绕过目录限制，读取系统敏感文件与 Vim swap 文件，恢复后台登录源码并获得管理员凭据。通过 SSH 本地端口转发访问内部管理后台后，进一步分析插件管理逻辑，利用

Эксперимент физиков доказал, что экстремальные космические процессы можно изучать на лабораторном столе.

A vulnerability was found in Tenda CH22 1.0.0.1 and classified as critical. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. This vulnerability is reported as CVE-2026-15543. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability has been found in will-moss Isaiah up to 1.36.9 and classified as critical. This affects an unknown function of the file app/main.go of the component Websocket Connection Authentication. The manipulation leads to improper authentication. This vulnerability is documented as CVE-2026-15542. The attack can be initiated remotely. There is not any exploit available. The pull request to fix this issue awaits acceptance.