Aggregator

A vulnerability was found in Phpscriptsnow World's Tallest Buildings 4.0. It has been declared as problematic. This vulnerability affects unknown code of the file bios.php. The manipulation of the argument Rank leads to cross site scripting. This vulnerability was named CVE-2009-2884. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Ecomstudio PHP Photo Vote1.3f 1.3F. It has been classified as problematic. Affected is an unknown function of the file login.php. The manipulation of the argument page leads to cross site scripting. This vulnerability is traded as CVE-2009-4857. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Стабильность умерла. В IT теперь рулит скорость адаптации.

欢迎预约，见证API风险监测系统全面升级！

士兵们将暂别无线电设备，戴上电竞耳机，为“21世纪战争挑战”做准备。

The comprehensive guidance focuses on technical recommendations for securing agentic AI applications, from development to deployment

The National Treasury of South Africa is among the half-dozen known victims in South Africa — along with other nations — of the mass compromise of on-premises Microsoft SharePoint servers.

当前环境出现异常，需完成验证后才能继续访问。

由于环境异常，需完成验证后方可继续访问。

根据 Associated Press-NORC Center for Public Affairs Research 的一项调查，60% 的美国成年人使用 AI 搜索信息，只有 37% 的受访者使用 AI 完成工作，40% 的受访者将 AI 用于头脑风暴。有 1437 名成年人在 7 月 10-14 日之间接受调查，结果显示不同代际在 AI 应用方面存在显著差距。30 岁以下的成年人中 74% 的人使用 AI 进行信息搜索，62% 使用 AI 进行创意构思，而 60 岁以上的成年人中，只有 23% 的人使用 AI 进行头脑风暴。约三分之一的美国人使用 AI 写电邮、创造或编辑图像，或娱乐目的。四分之一的人使用 AI 购物，16% 的人使用 AI 陪伴——在年轻人中这一比例达到 25%。

Threat actors have been observed exploiting a now-patched critical SAP NetWeaver flaw to deliver the Auto-Color backdoor in an attack targeting a U.S.-based chemicals company in April 2025. "Over the course of three days, a threat actor gained access to the customer's network, attempted to download several suspicious files and communicated with malicious infrastructure linked to Auto-Color

网络威胁行为者利用已修复的SAP NetWeaver漏洞CVE-2025-31324，在2025年4月针对一家美国化学品公司发起攻击，植入Auto-Color后门程序。该恶意软件具备远程控制功能，并在无法连接C2服务器时隐藏恶意行为以规避检测。

A vulnerability was found in Ovatheme Events Manager Plugin up to 1.7.5 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2025-32510. The attack can be launched remotely. There is no exploit available.

移动通信基带模块存在结构性风险

Hackers exploited a SAP NetWeaver bug to deploy upgraded Auto-Color Linux malware in an attack on U.S. chemicals firm. Cybersecurity firm Darktrace reported that threat actors exploited a SAP NetWeaver flaw, tracked as CVE-2025-31324, to deploy Auto-Color Linux malware in a U.S. chemicals firm attack. “In April 2025, Darktrace identified an Auto-Color backdoor malware attack […]

黑客利用SAP NetWeaver漏洞CVE-2025-31324攻击美国化学品公司，部署升级版Auto-Color Linux恶意软件。Darktrace检测到攻击并阻止部分恶意行为。该恶意软件隐藏机制复杂，依赖实时控制服务器通信，并具备多种功能以逃避检测。

阿根廷男子因裸体被谷歌街景拍到未打码的屁股画面而被邻居嘲笑。他起诉后法院判谷歌赔偿1.25万美元。此外，街景车还曾拍到杀人运尸画面助警方破案。

A vulnerability, which was classified as critical, has been found in Samsung Electronics MagicINFO 9 Server 21.1050/21.1052. This issue affects some unknown processing. The manipulation leads to path traversal. The identification of this vulnerability is CVE-2025-54453. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Samsung Electronics MagicINFO 9 Server 21.1050/21.1052. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. This vulnerability is handled as CVE-2025-54448. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.