Aggregator

上周关注度较高的产品安全漏洞(20250825-20250831)

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞447个，其中高危漏洞256个、中危漏洞173个、低危漏洞18个。

大模型安全挑战，破局点在哪？

Балтимор отдал миллион мошеннику, и никто даже не проверил чек.

A concerning surge in malicious domain registrations designed to exploit the upcoming 2026 FIFA World Cup, with threat actors already positioning themselves more than a year before the tournament begins. A comprehensive investigation by PreCrime Labs, the threat research division of BforeAI, has revealed that cybercriminals are systematically registering fraudulent domains to capitalize on the […]

The post Hackers Register Domains to Target 2026 FIFA World Cup in Cyberattack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

内部安全防护存在大量低级错误

What is the South Korea AI Act? South Korea’s Framework Act on the Development of Artificial Intelligence and Creation of a Trust Foundation, often referred to simply as the AI Framework Act or the AI Basic Act, is the country’s landmark law on artificial intelligence. It was passed by the National Assembly in December 2024, […]

The post South Korea AI Act appeared first on Centraleyes.

The post South Korea AI Act appeared first on Security Boulevard.

A vulnerability identified as critical has been detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /setting/admin.php of the component Setting Handler. Performing manipulation of the argument ddlBranch results in sql injection. This vulnerability is reported as CVE-2025-9793. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability categorized as critical has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /e_dashboard/e_all_info.php. Such manipulation of the argument mid leads to sql injection. This vulnerability is documented as CVE-2025-9792. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability was found in Tenda AC20 16.03.08.05. It has been rated as critical. This vulnerability affects unknown code of the file /goform/fromAdvSetMacMtuWan. This manipulation of the argument wanMTU causes stack-based buffer overflow. This vulnerability is registered as CVE-2025-9791. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

速修复

速修复

A vulnerability was found in SourceCodester Hotel Reservation System 1.0. It has been declared as critical. This affects an unknown part of the file /admin/updateabout.php. The manipulation of the argument address results in sql injection. This vulnerability is cataloged as CVE-2025-9790. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #641110 / VDB-322108

Submit #641102 / VDB-322107

从「鲶鱼」到「巨鲸」，一台麦克风的自我进化。

广告没跑通，高管先跑了。

Submit #641088 / VDB-322106

“以模制模”再获认可！360获安全优先的大模型厂商首推