Aggregator

Critical ImageMagick Vulnerability Allows Remote Code Execution

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
2 months ago

A critical security vulnerability has been discovered in ImageMagick, the widely used open-source image processing software, that could allow attackers to execute arbitrary code remotely. The vulnerability, tracked as CVE-2025-57803 with a severity score of 9.8 out of 10, affects 32-bit builds of ImageMagick versions before 7.1.2-2 and 6.9.13-28. The Vulnerability Details The security flaw stems from a 32-bit […]

The post Critical ImageMagick Vulnerability Allows Remote Code Execution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Divya

Malicious npm Package Impersonates Popular Nodemailer, Puts 3.9M Weekly Downloads at Risk of Crypto Theft

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
2 months ago

A sophisticated cryptocurrency theft scheme involving a malicious npm package that masquerades as the widely-used Nodemailer email library while secretly hijacking desktop cryptocurrency wallets on Windows systems. Socket’s Threat Research Team identified the malicious package, nodejs-smtp, which impersonates the legitimate Nodemailer library that averages approximately 3.9 million weekly downloads. The fraudulent package employs a clever […]

The post Malicious npm Package Impersonates Popular Nodemailer, Puts 3.9M Weekly Downloads at Risk of Crypto Theft appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

CVE-2025-9769 | D-Link DI-7400G+ 19.12.25A1 /mng_platform.asp sub_478D28 addr command injection

Vuldb Updates
2 months ago
A vulnerability described as critical has been identified in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub_478D28 of the file /mng_platform.asp. The manipulation of the argument addr with the input `echo 12345 > poc.txt` results in command injection. This vulnerability was named CVE-2025-9769. An attack on the physical device is feasible. In addition, an exploit is available.
vuldb.com

Python 纪录片上线

Solidot
2 months ago
由 CultRepo 制作的 Python 语言纪录片《Python: The Documentary | An origin story》上周在 YouTube 上线，观看量超过了 18 万次。Python 语言最初是荷兰程序员 Guido van Rossum 的“课余”项目，它简洁易读的特性最终令其从众多编程语言中脱颖而出，成为最受人喜爱的语言之一，成为驱动 AI、数据科学以及科技巨头所开发软件使用的语言。出现在纪录片中的人物包括了 Guido van Rossum、Travis Oliphant、Barry Warsaw 等，它讲述了 Python 的崛起、社区驱动的演变、几乎导致分崩离析的冲突，以及这门语言对世界万物的影响。

CVE-2022-38695 | Unisoc S8000 BootRom Local Privilege Escalation

VulDB Recent Entries
2 months ago
A vulnerability, which was classified as problematic, has been found in Unisoc SC9863A, T310, T610, T618, T606, T612, T616, T760, T770, T820 and S8000. This affects an unknown function of the component BootRom. This manipulation causes Local Privilege Escalation. The identification of this vulnerability is CVE-2022-38695. The attack can only be executed locally. There is no exploit available.
vuldb.com

ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics

The Hackers News
2 months ago
Cybersecurity researchers have discovered a new phishing campaign undertaken by the North Korea-linked hacking group called ScarCruft (aka APT37) to deliver a malware known as RokRAT. The activity has been codenamed Operation HanKook Phantom by Seqrite Labs, stating the attacks appear to target individuals associated with the National Intelligence Research Association, including academic figures
The Hacker News

Managed ad