Aggregator

今年夏末，国际政治舞台掀起新的波澜。美国总统特朗普和俄罗斯总统普京宣布将在2025 年 8 月 15 日于阿拉斯加举行会谈。

A vulnerability was found in GitLab Community Edition and Enterprise Edition. It has been classified as critical. This affects an unknown part of the component Clipboard Handler. The manipulation leads to command injection. This vulnerability is uniquely identified as CVE-2023-1708. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Frappe LMS up to 2.33.0. It has been rated as critical. This issue affects some unknown processing of the component SVG File Handler. The manipulation leads to unrestricted upload. The identification of this vulnerability is CVE-2025-55006. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic was found in workos authkit-react-router up to 0.6.x. Affected by this vulnerability is an unknown functionality. The manipulation leads to information disclosure. This vulnerability is known as CVE-2025-55008. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in OpenBao up to 2.3.1. Affected is an unknown function of the component LDAP Auth Method. The manipulation leads to improper neutralization of whitespace. This vulnerability is traded as CVE-2025-55001. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in fedify up to 1.8.4 and classified as critical. This vulnerability affects unknown code. The manipulation leads to improper authentication. This vulnerability was named CVE-2025-54888. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in oakserver oak up to 17.1.5 and classified as problematic. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument x-forwarded-proto/x-forwarded-for leads to resource consumption. The identification of this vulnerability is CVE-2025-55152. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in OpenBao. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to incorrect privilege assignment. This vulnerability is handled as CVE-2025-54996. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in CesiumLab Web up to 4.0. This vulnerability affects unknown code of the file /lodmodels/. The manipulation of the argument ID leads to sql injection. This vulnerability was named CVE-2025-8744. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in OpenBao. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper neutralization of whitespace. This vulnerability is known as CVE-2025-55000. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in OpenBao. This affects an unknown part of the component Login MFA. The manipulation leads to improper restriction of excessive authentication attempts. This vulnerability is uniquely identified as CVE-2025-55003. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in OpenBao. This vulnerability affects unknown code. The manipulation leads to code injection. This vulnerability was named CVE-2025-54997. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in OpenBao. Affected is an unknown function. The manipulation leads to improper restriction of excessive authentication attempts. This vulnerability is traded as CVE-2025-54998. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Craft CMS up to 4.16.2/5.8.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /storage/backups. The manipulation leads to code injection. This vulnerability is known as CVE-2025-54417. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

​一个举重冠军，闯入了「十项全能」赛场？

从先驱到追赶者，及其救赎之路。

ClickHouse 在文本搜索领域的策略，并非建立一个面面俱到的复杂索引系统.....

Cloud Platforms Engineering Manager Mozn | UAE | Remote – View job details As a Cloud Platforms Engineering Manager, you will lead the design, implementation, and lifecycle management of scalable, secure, and highly available cloud infrastructure. Embed security best practices across infrastructure, ensuring compliance with internal policies and industry standards. Oversee IAM, network segmentation, and infrastructure hardening to protect critical assets and environments. Cybersecurity Engineer Genomics | United Kingdom | Hybrid – View job details … More →

The post Cybersecurity jobs available right now: August 12, 2025 appeared first on Help Net Security.

9月17日，FightFraudCon2025互联网黑灰产攻防技术沙龙即将开启！vivo千镜安全实验室高级安全研究员赵紫如带来重磅议题《移动业务安全对抗实战：金融木马、应用变脸与广告陷阱》。

<p>Implementing CMMC and other Controlled Unclassified Information (CUI) protection obligations depends on the accurate identification of CUI, and in some cases also depends on the identification of the CUI categories and…</p>