Aggregator

A vulnerability labeled as critical has been found in Freeware Advanced Audio Decoder 2.8.8. This issue affects the function ps_mix_phase of the file libfaad/ps_dec.c. The manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2019-6956. The attack can be executed remotely. There is not any exploit available.

A vulnerability marked as problematic has been reported in FFmpeg. This issue affects some unknown processing of the file libavcodec/alsdec.c of the component ALS Decoder. Performing manipulation results in null pointer dereference. This vulnerability is identified as CVE-2025-7700. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in FFmpeg 6.1. It has been rated as critical. This affects the function draw_block_rectangle of the file libavfilter/vf_codecview.c. The manipulation leads to buffer overflow. This vulnerability is documented as CVE-2024-31582. The attack can be initiated remotely. There is not any exploit available.

“双A战略”引领效率稳步提升

A vulnerability labeled as critical has been found in FFmpeg 6.1-3-g466799d4f5. This issue affects the function av_malloc of the file libavutil/mem.c. Executing manipulation can lead to buffer overflow. This vulnerability appears as CVE-2023-50008. The attack may be performed from a remote location. There is no available exploit. It is advisable to implement a patch to correct this issue.

A vulnerability has been found in LuaJIT up to 2.1.0-beta3 and classified as problematic. Affected is the function __gc. The manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-2020-15890. The attack can be initiated remotely. There is not any exploit available.

A vulnerability marked as critical has been reported in LuaJIT up to 2.1.0-beta3. Impacted is the function lj_err_run of the file lj_err.c. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2020-24372. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in FFmpeg 6.1-3-g466799d4f5. This vulnerability affects the function theav_samples_set_silence of the file thelibavutil/samplefmt.c. The manipulation leads to buffer overflow. This vulnerability is referenced as CVE-2023-50007. Remote exploitation of the attack is possible. No exploit is available. Applying a patch is the recommended action to fix this issue.

A vulnerability, which was classified as critical, has been found in LuaJIT up to 2.0.5. Affected by this vulnerability is an unknown functionality. Performing manipulation results in type confusion. This vulnerability was named CVE-2019-19391. The attack may be initiated remotely. There is no available exploit. The actual existence of this vulnerability is currently in question.

A critical Server-Side Request Forgery (SSRF) vulnerability has been discovered in the popular PhpSpreadsheet library, allowing attackers to inject malicious HTML input when processing spreadsheet documents. The vulnerability, assigned CVE-2025-54370, affects multiple versions of the phpoffice/phpspreadsheet package and carries a high severity rating with CVSS v3.1 score of 7.5 and CVSS v4.0 score of 8.7. Vulnerability Details The security flaw was discovered by Aleksey […]

The post PhpSpreadsheet Library Vulnerability Lets Attackers Inject Malicious HTML Input appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

三位荷兰安全分析师发现欧洲无线电标准TETRA中的五个漏洞，影响摩托罗拉等公司设备。该标准自90年代起使用，因加密算法保密未被发现。2023年研究人员揭示了这些漏洞，并指出一种端到端加密实现也存在类似问题，加密密钥被压缩至56位，易遭破解。这些问题或为故意设计的后门。

关键词数据泄露总部位于英国的电信公司 Colt Technology Services 正在应对一起网络攻击，

关键词网络木马网络安全研究人员近日披露，一种名为 HOOK 的安卓银行木马出现了最新变种，其能力已经超越传统的

关键词docker近日，Docker官方披露了一个影响Windows和macOS版Docker Desktop

A critical security risk has emerged for Windows users of WhatsApp Desktop who also have Python installed. Attackers can exploit a flaw in how WhatsApp Desktop handles .pyz (Python archive) files, delivering arbitrary code execution on the victim’s machine with a single click. Researchers have discovered that a maliciously crafted .pyz file—normally used to bundle Python applications—can be disguised […]

The post Users of WhatsApp Desktop on Windows Face Code Execution Risk Via Python appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

大规模网络犯罪活动ShadowCaptcha利用超100个被黑WordPress网站将用户引导至伪造CAPTCHA页面，通过ClickFix社交工程策略传播信息窃取器、勒索软件和加密货币挖矿程序。攻击链通过恶意JavaScript重定向至假Cloudflare或Google CAPTCHA页面，并分两路执行：一路利用Windows Run对话框部署恶意软件，另一路引导用户保存并运行HTML应用以部署勒索软件。攻击者还使用反调试技术和DLL侧加载隐藏恶意行为。多数被黑网站位于澳大利亚、巴西等国，涉及技术、医疗等多个行业。建议加强用户培训和WordPress安全防护以应对威胁。

A new large-scale campaign has been observed exploiting over 100 compromised WordPress sites to direct site visitors to fake CAPTCHA verification pages that employ the ClickFix social engineering tactic to deliver information stealers, ransomware, and cryptocurrency miners. The large-scale cybercrime campaign, first detected in August 2025, has been codenamed ShadowCaptcha by the Israel National

Wi‑Fi для Game Boy. Похоже, 1998‑й официально вернулся.