Aggregator

“提示词工程”被黑客用来操纵AI代理，威胁企业安全。Gartner预测，到2028年，15%的日常决策将由AI自主完成，但AI的广泛集成和过大权限使其成为网络犯罪的新目标。**隐写式提示词**等技术正被滥用，导致AI执行未经授权的操作或泄露机密信息，问题紧急且严重。

A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an unknown function of the file db.inc.php of the component Maintenance. The manipulation leads to code injection. This vulnerability is traded as CVE-2025-1465. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Asus RT-N12E 2.0.0.19. It has been classified as problematic. Affected is an unknown function of the file sysinfo.asp. The manipulation of the argument SSID leads to cross site scripting. This vulnerability is traded as CVE-2025-1354. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as critical, has been found in Baiyi Cloud Asset Management System up to 20250204. This issue affects some unknown processing of the file /wuser/admin.house.collect.php. The manipulation of the argument project_id leads to sql injection. The identification of this vulnerability is CVE-2025-1464. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #496877 / VDB-296238

根据发表在《Lancet Public Health》期刊上的一项研究，欧洲预期寿命增长停滞，其中英格兰增速放缓幅度最大。专家将这一现象归因于糟糕饮食、缺乏活动和肥胖率大增。整个欧洲大陆的预期寿命年平均增长从 1990-2011 年的 0.23 岁降至 2011-2019 年的 0.15 岁。在研究的 20 个国家中，除挪威外的每个国家的预期寿命增速都出现了下降。英格兰的预期寿命年增速从 1990-2011 年的 0.25 岁降至 2011-2019 年的 0.07 岁，降幅达到 0.18 岁，其次是北爱尔兰（下降了 0.16 岁），以及威尔士和苏格兰（下降了 0.15 岁）。挪威、冰岛、瑞典、丹麦和比利时预期寿命增长最出色，即使新冠疫情期间也保持或提高了预期寿命。

在x64环境下彻底隐藏导入表需要突破传统PE加载机制。

Submit #494807 / VDB-296237

如何 投资积存金，deepseek提供的建议

如何 投资积存金，deepseek提供的建议

如何 投资积存金，deepseek提供的建议

如何 投资积存金，deepseek提供的建议

A vulnerability classified as problematic was found in Master Slider Plugin up to 3.10.4 on WordPress. This vulnerability affects unknown code of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-12173. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Six Apart Movable Type, Movable Type Advanced, Movable Type Premium, Movable Type Cloud Edition and Movable Type Premium Cloud Edition. This affects an unknown part of the component MT Block Editor. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-24841. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in masaakitanaka Booking Package Plugin up to 1.6.72 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-13508. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Six Apart Movable Type, Movable Type Advanced, Movable Type Premium, Movable Type Cloud Edition and Movable Type Premium Cloud Edition. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component MT Block Editor. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-22888. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Six Apart Movable Type, Movable Type Advanced, Movable Type Premium, Movable Type Cloud Edition and Movable Type Premium Cloud Edition. It has been classified as problematic. Affected is an unknown function of the component Multi-Factor Authentication Plugin. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-25054. It is possible to launch the attack remotely. There is no exploit available.

根据国家信息安全漏洞库（CNNVD）统计，本周（2025年2月10日至2025年2月16日）安全漏洞情况如下。

近日，一起大规模的数据泄露事件震动了网络安全界。名为“HikkI-Chan”的黑客在臭名昭著的Breach Forums上泄露了超过3.9亿VK用户的个人信息。

近日，一起大规模的数据泄露事件震动了网络安全界。名为“HikkI-Chan”的黑客在臭名昭著的Breach Forums上泄露了超过3.9亿VK用户的个人信息。