Aggregator

A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 108. Affected by this issue is some unknown functionality of the component URL Handler. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is handled as CVE-2023-23601. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Mozilla Thunderbird up to 102.6. This affects an unknown part of the component URL Handler. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is uniquely identified as CVE-2023-23601. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.18.7. It has been rated as problematic. This issue affects the function uvcg_video_pump. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2022-49686. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Ghost up to 5.42.0. This affects an unknown part. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2023-32235. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

ESET раскрывает подробности о недавно обнаруженной уязвимости.

A vulnerability classified as problematic was found in GitLab. This vulnerability affects unknown code of the component Prometheus Server. The manipulation leads to denial of service. This vulnerability was named CVE-2023-1733. The attack can be initiated remotely. There is no exploit available.

致力于第一时间为企业级用户提供权威漏洞情报和有效解决方案。

**Project Ire 承诺利用大型语言模型（LLM）来判断代码是恶意还是良性。

根据发表在 PNAS 期刊上的一项研究报告，康奈尔大学研究人员发现，利用人类固体排泄物生产的生物炭，每年能满足全球 7% 的磷肥需求。生物炭与从尿液中提取的营养物质结合后，能提供全球农业所需磷的 15%、氮的 17% 和钾的 25%。生物炭生产过程可将固体排泄物的体积和重量减少最多 90%，同时还可以根据特定作物的需求调整营养比例。

A vulnerability, which was classified as problematic, was found in Software Issue Manager Plugin up to 5.0.1 on WordPress. This affects an unknown part. The manipulation of the argument noaccess_msg leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-8314. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in B Blocks Plugin up to 2.0.6 on WordPress. It has been declared as critical. Affected by this vulnerability is the function rgfr_registration. The manipulation leads to missing authorization. This vulnerability is known as CVE-2025-8059. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in UiCore Elements Plugin up to 1.3.0 on WordPress. It has been rated as problematic. Affected by this issue is the function prepare_template. The manipulation leads to missing authorization. This vulnerability is handled as CVE-2025-6253. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Novell iManager 2.0.2. This affects an unknown part. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2005-1730. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Что на самом деле делают продукты Palantir.

Reddit 与 Google 等公司签署了协议，将其用户生成的内容出售给 Google 等公司训练 AI，它限制了其它 AI 公司抓取其内容。但现在 Reddit 发现部分 AI 公司改从互联网馆的 Wayback Machine 抓取 Reddit 的内容，它宣布将阻止互联网档案馆的爬虫索引 Reddit 的大部分内容，Wayback Machine 将只能索引 Reddit.com 主页，无法再获得详细的帖子内容、用户评论等。

A vulnerability was found in WP Chart Generator Plugin up to 1.0.4 on WordPress. It has been rated as problematic. This issue affects the function wpchart of the component Shortcode Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-8685. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Simple Responsive Slider Plugin up to 2.0 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-8690. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Mosaic Generator Plugin up to 1.0.5 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation of the argument c leads to cross site scripting. This vulnerability is known as CVE-2025-8621. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Inline Stock Quotes Plugin up to 0.2 on WordPress. Affected by this issue is the function stock of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-8688. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in pyload up to 0.5.0b3.dev90. Affected is an unknown function of the file /json/add_package of the component API. The manipulation of the argument add_links leads to sql injection. This vulnerability is traded as CVE-2025-55156. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.