Aggregator

A vulnerability was found in FFmpeg up to 6.0 and classified as critical. Affected by this issue is some unknown functionality of the component JJPEG XL Parser. The manipulation leads to integer overflow. This vulnerability is handled as CVE-2024-22862. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in OpenHarmony up to 5.0.3. This issue affects some unknown processing of the component tcb. The manipulation leads to use after free. The identification of this vulnerability is CVE-2025-24298. The attack needs to be approached locally. There is no exploit available.

A vulnerability has been found in OpenHarmony up to 5.0.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component tcb. The manipulation leads to use after free. This vulnerability is known as CVE-2025-27128. Local access is required to approach this attack. There is no exploit available.

A vulnerability was found in OpenHarmony up to 5.0.3. It has been classified as problematic. This affects an unknown part. The manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2025-24844. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in OpenHarmony up to 5.0.3. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to memory leak. This vulnerability was named CVE-2025-24925. The attack needs to be approached locally. There is no exploit available.

A vulnerability was found in OpenHarmony up to 5.0.3. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to denial of service. The identification of this vulnerability is CVE-2025-25212. An attack has to be approached locally. There is no exploit available.

A vulnerability classified as problematic has been found in OpenHarmony up to 5.0.3. Affected is an unknown function. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2025-26690. Local access is required to approach this attack. There is no exploit available.

A vulnerability classified as problematic was found in OpenHarmony up to 5.0.3. Affected by this vulnerability is an unknown functionality. The manipulation leads to type confusion. This vulnerability is known as CVE-2025-27536. Attacking locally is a requirement. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in OpenHarmony up to 5.0.3.x. Affected by this issue is some unknown functionality. The manipulation leads to memory leak. This vulnerability is handled as CVE-2025-27562. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this issue is the function setRIP of the file /goform/setRIP. The manipulation of the argument RIPmode/RIPpasswd leads to stack-based buffer overflow. This vulnerability is handled as CVE-2025-8824. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801 and classified as critical. This vulnerability affects the function um_rp_autochannel of the file /goform/RP_setBasicAuto. The manipulation of the argument apcli_AuthMode_2G/apcli_AuthMode_5G leads to stack-based buffer overflow. This vulnerability was named CVE-2025-8826. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A critical vulnerability was uncovered that transforms ordinary Linux-powered webcams into weaponized BadUSB attack tools, enabling remote hackers to inject malicious keystrokes and compromise target systems without detection.  The research, presented at DEF CON 2025, demonstrates the first known case where attackers can remotely weaponize USB devices already connected to computers, marking a significant evolution […]

The post Hackers Weaponized Linux Webcams as Attack Tools to Inject Keystrokes and Launch Attacks appeared first on Cyber Security News.

Meta has introduced a transformative update to Instagram, evolving the platform from a simple photo-sharing service into an always-on real-time location broadcaster via its new “Map” feature. Announced in early August 2025, this functionality allows users to opt-in for sharing their last active location with selected friends, updating automatically whenever the app is opened or […]

The post Meta’s New Feature Turns Instagram into a Real-Time Location Broadcaster appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

15 скрытых правил GPT-5, которые вы никогда не увидите в интерфейсе.

The cybersecurity landscape faces an unprecedented threat as artificial intelligence coding assistants inadvertently transform into reconnaissance tools for malicious actors. A recent investigation reveals how developers’ interactions with AI tools like Claude CLI and GitHub Copilot are creating comprehensive attack blueprints that eliminate the traditional barriers to sophisticated cyber intrusions. Modern AI coding assistants store […]

The post AI Coding Assistant Creating a Perfect Blueprints for Attackers appeared first on Cyber Security News.

2024年CCF-绿盟科技“鲲鹏”科研基金项目申报指南

Hackers release 9GB of stolen files from the computer of an alleged North Korean hacker, revealing tools, logs,…

Steam 创意工坊知名模组遭遇大规模恶意 DMCA 举报，问题始于《钢铁雄心4》，然后迅速扩散到其它流行游戏，包括 Left 4 Dead 2、Terraria、Garry's Mod、Stellaris、Wallpaper Engine 和 Rimworld 等等。恶意人士滥用了 Steam 平台创意工坊 DMCA 举报机制。当有模组遭遇 DMCA 投诉时，Valve 采取了一种非常节省它自己时间的做法：模组开发者首先收到警告邮件，要求解决 DMCA 问题，模组开发者然后需要递交证据证明没有违反 DMCA，Valve 会进行审核，但你知道谁去审核证据？是举报人。当举报人发现他们不需要任何证据就可以举报流行模组后，他们开始恶意将各个流行游戏的流行模组全部举报。问题起源于《钢铁雄心4》，《钢铁雄心4》有一个模组叫 The Fire Rises (TFR)，TFR 有一个来自中国的子模组 Loong Rising of Darkness(LROD)，双方的开发者不知何故发生了冲突，TFR 向 LROD 发出了 DMCA，双方试图和解，但 TFR 发出的 DMCA 没有撤销，最终导致 LROD 下架，随后 LROD 发起了反击，举报了 TFR，并发现可以滥用 DMCA，因此扩大了举报范围，导致各大游戏的流行模组几乎无一幸免。玩家呼吁 Valve 立即采取行动，改变它处理 DMCA 的方法。

Ваш смартфон помогает красть деньги, а вы об этом даже не догадываетесь.