Aggregator

关键词网络安全近年来，网络电子支付迅速崛起，为生活带来便捷的同时，也隐藏着不少隐患。

银狐黑产组织伪装成WPS钓鱼网站最新高级样本分析

As we enter the holiday shopping season, more people are using AI tools and tips to shop for deals and protect themselves online. Here’s how.

The post AI Meets Holidays: Helpful Tools, Best Deals and Security Tips appeared first on Security Boulevard.

Когда Земля мешает науке, биоинженеры начинают мечтать об орбитальных лабораториях.

Ukrainian Oleksii Lytvynenko extradited from Ireland to US for alleged role in Conti ransomware after fleeing Ukraine in 2022. Ukrainian national Oleksii Lytvynenko (43) extradited from Ireland to the US, faces charges for alleged involvement in Conti ransomware attacks after fleeing Ukraine in 2022. The man appeared in a US court and was charged with […]

Это событие предсказали еще 30 лет назад. И только теперь ученые увидели его своими глазами.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Can your earbuds recognize you? Researchers are working on it Biometric authentication has moved from fingerprints to voices to facial scans, but a team of researchers believes the next step could be inside the ear. New research explores how the ear canal’s unique acoustic properties can be used to verify identity through wireless earbuds. Their system, called EarID, shows that … More →

The post Week in review: WSUS vulnerability exploited to drop Skuld infostealer, PoC for BIND 9 DNS flaw published appeared first on Help Net Security.

苹果构建“硬件+服务+生态”的多元引擎，在动荡市场竞争中仍稳守阵地。

Очередное обновление ОС породило сбой в стиле сюжетов Кристофера Нолана.

第二届数证杯电子数据取证大赛非官方全模块writeup全网首发

A vulnerability, which was classified as critical, was found in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php. The manipulation results in sql injection. This vulnerability is identified as CVE-2025-12612. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability, which was classified as critical, has been found in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow. This vulnerability is referenced as CVE-2025-12611. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability classified as critical was found in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing manipulation of the argument ID can lead to sql injection. The identification of this vulnerability is CVE-2025-12610. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing manipulation of the argument id/ini_weight results in sql injection. This vulnerability was named CVE-2025-12609. The attack may be initiated remotely. In addition, an exploit is available.

Submit #678547 / VDB-330907

Submit #678529 / VDB-316239

Submit #678491 / VDB-330906

Submit #678450 / VDB-330905

Submit #678403 / VDB-330904

Submit #678402 / VDB-330904