Aggregator

Name: ATHENA CTF (an Athena CTF event.)
Date: July 18, 2026, 5:30 a.m. — 19 July 2026, 05:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Location: On-line
Offical URL: https://ctf.athena-ctf.com/
Rating weight: 0
Event organizers: Athena-CTF

原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅

世嘉18日在北京的大型商业设施内开设了常驻官方门店。虽然日中关系转冷，但日本IP人气依旧。周边商品消费持续升温的中国已成为日本游戏和娱乐巨头的重要市场，各家纷纷开设新店。这是世嘉在中国继上海之后开设的

这篇文章是 TDS Studio 在少数派上的第 26 篇文章，依然是全平台首发。1000X The ColleXion，这是索尼 1000X 系列的十周年纪念产品线。完全想不到跟群友们畅聊 MDR-

月之暗面最新推出的K3大模型正在搅动全球科技市场。分析指出，这款新模型的问世颠覆了外界关于美国在AI领域仍领先中国的固有认知。月之暗面周五发布新K3模型，该模型在多项基准测试中不仅超越竞争对手，性能还

Name: AxiomCTF 2026 Finals (an Axiom CTF event.)
Date: July 18, 2026, 7 a.m. — 18 July 2026, 15:00 UTC  [add to calendar]
Format: Attack-Defense
On-site
Location: Russia, Moscow
Offical URL: https://ctf.4x10m.ru/
Rating weight: 0.00
Event organizers: 4x10m

Name: ENOWARS 10 (an ENOWARS event.)
Date: July 18, 2026, noon — 18 July 2026, 21:00 UTC  [add to calendar]
Format: Attack-Defense
On-line
Offical URL: https://10.enowars.com/
Rating weight: 83.50
Event organizers: ENOFLAG

A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this vulnerability is the function AP4_BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. This vulnerability is listed as CVE-2022-3664. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability, which was classified as critical, was found in Axiomatic Bento4. Affected by this issue is some unknown functionality of the file AvcInfo.cpp of the component avcinfo. The manipulation results in heap-based buffer overflow. This vulnerability is cataloged as CVE-2022-3665. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Axiomatic Bento4 and classified as critical. This affects the function AP4_LinearReader::Advance of the file Ap4LinearReader.cpp of the component mp42ts. This manipulation causes use after free. This vulnerability is registered as CVE-2022-3666. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability classified as problematic was found in Axiomatic Bento4. Affected is the function AP4_StsdAtom of the file Ap4StsdAtom.cpp of the component MP4fragment. Executing a manipulation can lead to null pointer dereference. This vulnerability is tracked as CVE-2022-3663. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability classified as critical has been found in Axiomatic Bento4. This impacts the function GetOffset of the file Ap4Sample.h of the component mp42hls. Performing a manipulation results in use after free. This vulnerability is identified as CVE-2022-3662. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in Google Chrome. It has been rated as critical. The affected element is an unknown function of the component Extensions. This manipulation causes improper input validation. This vulnerability is tracked as CVE-2022-3661. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in websocket-driver up to 0.8.0. It has been declared as problematic. Affected is an unknown function of the component Message Compression Handler. Such manipulation leads to resource consumption. This vulnerability is uniquely identified as CVE-2026-54464. The attack can only be initiated within the local network. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability was found in LibJXL up to 0.11.2. It has been rated as problematic. This affects the function DecodeImageAPNG of the component APNG Decoder. This manipulation causes buffer overflow. This vulnerability is handled as CVE-2026-52584. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability was found in Telegram Desktop up to 6.7.5. It has been classified as problematic. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/url_auth_box.cpp of the component Bot API. The manipulation of the argument login_url leads to null pointer dereference. This vulnerability is traded as CVE-2026-7701. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. There is ongoing doubt regarding the real existence of this vulnerability. Upgrading the affected component is recommended. The vendor provides this rationale for the dispute: "[T]he described scenario does not lead to any security issue or vulnerability, and only causes a one-time crash. In the outlined scenario, the targeted user must perform an active action, which doesn't produce any consequences after the app is relaunched."