Aggregator

强势围观👍

A vulnerability was found in Deliver via Shipos for WooCommerce Plugin up to 2.1.7 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument dvsfw_bulk_label_url leads to cross site scripting. This vulnerability is handled as CVE-2024-12222. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in ResAds Plugin up to 2.0.6 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-12122. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in SEMA API Plugin up to 5.27 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument catid leads to cross site scripting. This vulnerability was named CVE-2024-12285. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in CLUEVO LMS, E-Learning Platform Plugin up to 1.13.2 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-11328. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in WhatsApp Click to Chat Plugin up to 3.0.4 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-11686. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Searchie Plugin up to 1.17.0 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-12819. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Apache Kvrocks up to 2.11.0. Affected is an unknown function of the component HTTP Request Handler. The manipulation leads to misinterpretation of input. This vulnerability is traded as CVE-2025-25069. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in ZF RSSPlus. It has been classified as problematic. This affects an unknown part of the component RSSPlus SecurityAccess Service. The manipulation leads to authentication bypass by primary weakness. This vulnerability is uniquely identified as CVE-2024-12054. Access to the local network is required for this attack. There is no exploit available.

Grip Security has unveiled its SaaS Security Posture Management (SSPM) solution, which proactively identifies misconfigurations, enforces best practices and strengthens SaaS security posture against emerging risks. Unlike traditional SSPM products, Grip SSPM is built on a foundation of visibility and automation, enabling organizations to combine misconfiguration remediation and policy enforcement as part of a comprehensive security program that addresses SaaS security end-to-end. By consolidating SaaS security into a single platform, Grip SSPM streamlines operations, automates … More →

The post Grip Security unveils SSPM solution to strengthen SaaS security posture appeared first on Help Net Security.

Researchers observed a sophisticated cyber-espionage campaign led by the Chinese state-sponsored group known as “Salt Typhoon,” also referred to as “RedMike.”  Between December 2024 and January 2025, the group exploited over 1,000 unpatched Cisco network devices globally, targeting telecommunications providers and universities.  The campaign highlights the ongoing vulnerability of critical infrastructure and the strategic intelligence […]

The post RedMike Hackers Exploited 1000+ Cisco Devices to Gain Admin Access  appeared first on Cyber Security News.

作为换囚交易的一部分美国释放了 BTC-e 联合创始人 Alexander Vinnik，交换被俄罗斯关押的美国教师 Marc Fogel。Alexander Vinnik 和 Aleksandr Bilyuchenko 于 2011 年 7 月创办了俄罗斯加密货币交易所 BTC-e。Vinnik 于 2017 年在希腊应美国要求被捕，受到了洗钱等逾 20 项指控，他于 2020 年首先被引渡到法国，因洗钱指控被判 5 年，随后又送回了希腊。2022 年引渡到美国。美国检方指控 BTC-e 是全球网络罪犯主要的洗钱途径，而 Vinnik 经营该交易所的目的是促进非法活动。BTC-e 处理了逾 90 亿美元的交易。2024 年 5 月，Vinnik 承认通过 BTC-e 洗钱数十亿美元的指控。

所以完美不会使人进步，但谩骂、诋毁和攻击，一定会让我们在艰难地前进道路上，寸寸留下坚实的脚印！

所以完美不会使人进步，但谩骂、诋毁和攻击，一定会让我们在艰难地前进道路上，寸寸留下坚实的脚印！

所以完美不会使人进步，但谩骂、诋毁和攻击，一定会让我们在艰难地前进道路上，寸寸留下坚实的脚印！

所以完美不会使人进步，但谩骂、诋毁和攻击，一定会让我们在艰难地前进道路上，寸寸留下坚实的脚印！

所以完美不会使人进步，但谩骂、诋毁和攻击，一定会让我们在艰难地前进道路上，寸寸留下坚实的脚印！

所以完美不会使人进步，但谩骂、诋毁和攻击，一定会让我们在艰难地前进道路上，寸寸留下坚实的脚印！

所以完美不会使人进步，但谩骂、诋毁和攻击，一定会让我们在艰难地前进道路上，寸寸留下坚实的脚印！