Aggregator

CVE-2011-10016 | RealNetworks Netzip Classic 7.5.1.86 ZIP File Parser stack-based overflow (EUVD-2011-5243 / EDB-16083)

Vuldb Updates
1 month 2 weeks ago
A vulnerability, which was classified as critical, has been found in RealNetworks Netzip Classic 7.5.1.86. Affected by this issue is some unknown functionality of the component ZIP File Parser. The manipulation leads to stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is handled as CVE-2011-10016. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2012-10059 | Dolibarr ERP/CRM up to 3.1.1/3.2.0 Database Backup sql_compat os command injection (EUVD-2012-6605 / EDB-18724)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Dolibarr ERP and CRM up to 3.1.1/3.2.0. It has been classified as critical. Affected is an unknown function of the component Database Backup Handler. The manipulation of the argument sql_compat leads to os command injection. This vulnerability is traded as CVE-2012-10059. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2012-10057 | Lattice Semiconductor ispVM System 18.0.2 xcf Project File stack-based overflow (EUVD-2012-6604 / EDB-18947)

Vuldb Updates
1 month 2 weeks ago
A vulnerability has been found in Lattice Semiconductor ispVM System 18.0.2 and classified as critical. This vulnerability affects unknown code of the component xcf Project File Handler. The manipulation leads to stack-based buffer overflow. This vulnerability was named CVE-2012-10057. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

科技爱好者周刊（第 361 期）：暗网 Tor 安全吗？

不安全
1 month 2 weeks ago
文章介绍了烟台时光塔及其功能，探讨了Tor浏览器和暗网的安全性问题，并分享了多篇科技动态文章，包括中国载人月球登陆器测试、手机通话被激光窃听的技术演示等。此外还介绍了多个工具和资源，并回顾了往年的话题。

Hackers exploit Microsoft flaw to breach Canada ’s House of Commons

Security Affairs
1 month 2 weeks ago
Hackers breached Canada ’s House of Commons, exploiting a recent Microsoft flaw, compromising data, according to CBC News. Threat actors reportedly breached Canada’s House of Commons by exploiting a recently disclosed Microsoft vulnerability. “The House of Commons and Canada’s cybersecurity agency are investigating a significant data breach caused by an unknown “threat actor” targeting employee […]
Pierluigi Paganini

美团智能头盔研发实践系列02：软件功能篇

美团技术团队
1 month 2 weeks ago
本文系《美团智能头盔研发实践系列》的第二篇文章，围绕智能头盔如何通过主动安全和被动安全相结合的方式有效保护骑手，主要包括智能头盔骑行通话质量强化、智能语音助手、碰撞摔倒监控等三项软件能力。
美团技术团队

美团智能头盔研发实践系列01：硬件设计篇

美团技术团队
1 month 2 weeks ago
本文系《美团智能头盔研发实践》系列的第一篇文章，聚焦硬件设计维度。针对外卖骑手传统头盔佩戴体验不佳等痛点，从安全保障、体验优化、效率提升三大方向切入，详细解析安全防护、多传感器预警、通风减重、长效续航、音频降噪、工艺控制等关键技术，并提炼研发过程中行之有效的设计经验。
美团技术团队

Qilin Ransomware Leads The Attack Landscape With 70+ Claimed Victims in July

Cyber Security News
1 month 2 weeks ago

The ransomware threat landscape witnessed a concerning surge in July 2025, with the Qilin ransomware group maintaining its dominant position for the third time in four months. The group successfully claimed 73 victims on its data leak site, representing 17.3% of the month’s total 423 ransomware incidents. This marks a significant consolidation of criminal operations […]

The post Qilin Ransomware Leads The Attack Landscape With 70+ Claimed Victims in July appeared first on Cyber Security News.

Tushar Subhra Dutta

New FireWood Malware Attacking Linux Systems to Execute Commands and Exfiltrate Sensitive Data

Cyber Security News
1 month 2 weeks ago

A sophisticated new variant of the FireWood backdoor has emerged, targeting Linux systems with enhanced evasion capabilities and streamlined command execution functionality. This latest iteration represents a significant evolution of the malware family first discovered by ESET’s research team, which has been linked to the long-running “Project Wood” malware lineage dating back to at least […]

The post New FireWood Malware Attacking Linux Systems to Execute Commands and Exfiltrate Sensitive Data appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2025-8924 | Campcodes Online Water Billing System 1.0 /viewbill.php ID sql injection (EUVD-2025-24634)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Campcodes Online Water Billing System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewbill.php. The manipulation of the argument ID leads to sql injection. The identification of this vulnerability is CVE-2025-8924. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2025-8925 | itsourcecode Sports Management System 1.0 /Admin/match.php sql injection (EUVD-2025-24633)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in itsourcecode Sports Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Admin/match.php. The manipulation of the argument code leads to sql injection. This vulnerability is traded as CVE-2025-8925. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad