Aggregator

请用户们警惕打着安全旗号行不轨之事的人。

Submit #587386 / VDB-260614

复旦大学CodeWisdom团队博士生袁志强的实践分享

Submit #587382 / VDB-310664

A vulnerability has been found in Linux Kernel up to 6.1.134/6.6.87/6.12.24/6.14.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument speed leads to divide by zero. This vulnerability is known as CVE-2025-37767. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.134/6.6.87/6.12.24/6.14.3. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument speed leads to divide by zero. The identification of this vulnerability is CVE-2025-37771. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

The China-linked threat actor behind the recent in-the-wild exploitation of a critical security flaw in SAP NetWeaver has been attributed to a broader set of attacks targeting organizations in Brazil, India, and Southeast Asia since 2023. "The threat actor mainly targets the SQL injection vulnerabilities discovered on web applications to access the SQL servers of targeted organizations," Trend

Мир незаметно превращают в кукольный театр через соцсети.

A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php. The manipulation of the argument Username leads to sql injection. This vulnerability is known as CVE-2025-5370. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. This vulnerability is traded as CVE-2025-5369. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

第十届“创客中国”网络安全中小企业创新创业大赛启动仪式5月30日在四季青镇成功举办。

详细分享RSAC2025大会上有关安全运营的议题，并以此一窥未来安全运营的技术发展趋势。

关键词数据泄露数据分析巨头LexisNexis旗下部门遭遇数据泄露，逾36万人信息遭窃。

关键词安全漏洞安全研究人员披露苹果Safari浏览器存在设计缺陷，攻击者可利用全屏模式实施“浏览器中间人攻击”

关键词安全漏洞网络安全团队 Oasis Research Team 于 5 月 28 日发布博文，报告称微软