Aggregator

固件调试、ROP 构造、EXP 编写，全流程无尿点

看雪论坛作者ID：易之生生

Suspected state-sponsored attackers are using a custom backdoor to persistently compromise Cisco security devices (firewalls), the US CISA and the UK National Cyber Security Centre warned on Thursday. “The [Firestarter] malware (…) is relevant for both Cisco Firepower and Secure Firewall devices; however, CISA has only observed a successful implant of the malware in the wild on a Cisco Firepower device running ASA software,” the Cybersecurity and Infrastructure Security Agency noted. CISA also shared threat … More →

The post New Cisco firewall malware can only be killed by pulling the plug appeared first on Help Net Security.

全力冲刺，实现开门红

银河系是圆盘状恒星，也就是恒星的形成是由里向外，这意味着越远的恒星越年轻。天文学家分析了银河系逾 10 万颗巨型恒星，发现恒星年龄分布由内向外模式在距离银河系中心 3.5-4 万光年间发生逆转，超过该距离恒星年龄变大了。这种突变形成了 U 型年龄分布，曲线最低点对应的恒星形成率急剧下降，代表着银河系恒星形成盘的边界。天文学家认为他们识别了银河系圆盘的边缘。

Зарубежный трафик в России продолжает расти вопреки блокировкам.

A vulnerability classified as problematic has been found in Secure Computing SafeWord RemoteAccess 2.1. Affected by this issue is some unknown functionality of the file servers\web\tomcat\usercenter\web-inf\login.conf. The manipulation leads to missing encryption of sensitive data. This vulnerability is traded as CVE-2006-5303. An attack has to be approached locally. There is no exploit available.

A vulnerability classified as critical was found in Inccms Technology IncCMS Core up to 1.0.0. This affects an unknown part. The manipulation of the argument inc_dir results in file inclusion. This vulnerability is known as CVE-2006-5304. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability, which was classified as critical, has been found in phpbb lat2cyr 1.0.1. This vulnerability affects unknown code of the file lat2cyr.php. This manipulation of the argument phpbb_root_path causes file inclusion. This vulnerability is handled as CVE-2006-5305. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability, which was classified as critical, was found in phpBB Journals System module up to 1.0.2. This issue affects some unknown processing. Such manipulation of the argument phpbb_root_path leads to code injection. This vulnerability is uniquely identified as CVE-2006-5306. The attack can be launched remotely. Moreover, an exploit is present. You should upgrade the affected component.

A vulnerability was found in Open Conference Systems up to 1.1.5 and classified as critical. The affected element is an unknown function. Executing a manipulation of the argument fullpath can lead to file inclusion. The identification of this vulnerability is CVE-2006-5308. The attack may be launched remotely. Furthermore, there is an exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in phpBB Prillian French up to 0.8.0. It has been classified as critical. The impacted element is an unknown function. The manipulation of the argument phpbb_root_path leads to file inclusion. This vulnerability is referenced as CVE-2006-5309. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability was found in phpMyConferences 8.0.2. It has been declared as critical. This affects an unknown function. The manipulation of the argument lvc_include_dir results in code injection. This vulnerability is identified as CVE-2006-5310. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability was found in Buzlas 2006-1 Full. It has been rated as critical. This impacts an unknown function. This manipulation of the argument phpbb_root_path causes file inclusion. This vulnerability is tracked as CVE-2006-5311. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability categorized as critical has been discovered in phpBB Ajax Shoutbox up to 0.0.5. Affected is an unknown function of the file shoutbox.php. Such manipulation of the argument phpbb_root_path leads to file inclusion. This vulnerability is listed as CVE-2006-5312. The attack may be performed from remote. In addition, an exploit is available.

Bitwarden CLI was hit by the Checkmarx supply chain attack. Version 2026.4.0 shipped malicious code in bw1.js via a compromised GitHub Action. Bitwarden CLI has been compromised as part of the ongoing Checkmarx supply chain campaign, researchers warn. The affected version, @bitwarden/cli 2026.4.0, contained malicious code hidden in the bw1.js file. The breach likely stemmed […]

真正的问题不是扫出了什么，是：这个生态还有没有，有效的免疫系统？

Chinese-speaking individuals are the target of a new campaign that uses a trojanized version of SumatraPDF reader to deploy the AdaptixC2 Beacon post-exploitation agent and ultimately facilitate the abuse of Microsoft Visual Studio Code (VS Code) tunnels for remote access. Zscaler ThreatLabz, which discovered the campaign last month, has attributed it with high confidence to Tropic Trooper (aka

未来国家人工智能安全漏洞库将发挥资源汇聚优势，与社会各界紧密协作、携手共进，合力推动人工智能产业健康有序发展，护航数字中国和网络强国建设，共同构建网络空间命运共同体。

智能情报驱动，以AI治理AI。新一代数字供应链安全治理体系再闭环，智能治理“AI 数字员工”！