Aggregator

Submit #496969 / VDB-296475

A vulnerability was found in Tenda i12 1.0.0.10(3805). It has been classified as critical. Affected is the function formWifiMacFilterSet. The manipulation of the argument index leads to buffer overflow. This vulnerability is traded as CVE-2025-25679. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Tenda AC8V4 16.03.34.06 and classified as critical. This issue affects the function sub_49E098. The manipulation of the argument shareSpeed leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2025-25664. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in phpcmsv9 9.6.3 and classified as problematic. This vulnerability affects unknown code of the component Menu Interface. The manipulation leads to cross site scripting. This vulnerability was named CVE-2025-25960. The attack can be initiated remotely. There is no exploit available.

The once-shadowy realm of Pegasus spyware has breached new frontiers, with forensic analyses revealing a stark pivot from targeting journalists and activists to infiltrating the private sector. In December 2024, mobile security firm iVerify detected 11 new Pegasus infections among 18,000 scanned devices—a 1.5 per 1,000 incidence rate—exposing finance, real estate, and logistics executives to […]

The post Pegasus Spyware Now Targeting Business Executives and Financial Sector Professionals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

微软已经停止支持 Windows 7/8/8.1 操作系统，而操作系统上最流行的应用——即浏览器如 Google Chrome 和 Microsoft Edge 都停止了对上述旧操作系统的支持，Mozilla 于 2023 年 7 月释出的 Firefox 115 ESR 是 Firefox 支持 Windows 7/8/8.1 的最后一个版本。Mozilla 开发者去年初透露他们在考虑延长对 Windows 7/8/8.1 的支持时间，但尚未决定支持多长时间。现在根据最新的发布计划，Mozilla 宣布 Firefox 115 ESR 将会支持到 2025 年 9 月，在 8 月份进行一次重新评估，将宣布 Firefox 115 的终止支持时间。Mozilla 计划继续为 115 ESR 释出安全更新直至 8 月 19 日的 Firefox 115.27 ESR。

本文就检索增强生成技术的基本原理进行介绍，并使用代码演示 RAG 技术在构建知识库方面的应用实施。

本文就检索增强生成技术的基本原理进行介绍，并使用代码演示 RAG 技术在构建知识库方面的应用实施。

作者：0x7F@知道创宇404实验室 日期：2025年2月17日 1. 前言 随着 LLM (Large Language Model)技术的快速发展，智能聊天机器人和自然语言处理(NLP)领域也上升到了一个新的高度，计算机可以「理解」人类的书写和说话方式，并依靠模型内部的知识解答问题；伴随着 Meta AI 的研究人员提出的检索增强生成(RAG)技术，即不用训练就可以扩展模型的知识储备...

A vulnerability, which was classified as problematic, was found in phpcmsv9 9.6.3. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-25958. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Ajax Search Lite Plugin up to 4.12.4 on WordPress. Affected by this issue is some unknown functionality of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-13585. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in WP Carousel Plugin up to 2.7.3 on WordPress. Affected by this vulnerability is an unknown functionality of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-13314. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in amothemo AMO Team Showcase Plugin up to 1.1.4 on WordPress. Affected is the function amoteam_skills of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-1407. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in s56bouya Newpost Catch Plugin up to 1.3.19 on WordPress. It has been rated as problematic. This issue affects the function npc of the component Shortcode Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-1406. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in victorfreitas WPUpper Share Buttons Plugin up to 3.51 on WordPress. It has been declared as problematic. This vulnerability affects the function save_custom_css_request. The manipulation leads to cross-site request forgery. This vulnerability was named CVE-2024-13883. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in ttoomey C9 Admin Dashboard Plugin up to 1.3.5 on WordPress. It has been classified as problematic. This affects an unknown part of the component SVG File Upload. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-13379. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in labibahmed42 3D Photo Gallery Plugin up to 1.3 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument des[] leads to cross site scripting. This vulnerability is handled as CVE-2024-13751. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in minicoursegenerator Mini Course Generator Plugin up to 1.0.5 on WordPress and classified as problematic. Affected by this vulnerability is the function mcg of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-13672. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in tcoder TCBD Tooltip Plugin up to 1.0 on WordPress. Affected is the function tcbdtooltip_text of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-13388. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Tenda AC10 15.03.06.23. This issue affects the function formexeCommand of the component POST Request Handler. The manipulation of the argument cmdinput leads to command injection. The identification of this vulnerability is CVE-2025-25675. The attack may be initiated remotely. There is no exploit available.