Aggregator

A vulnerability classified as problematic was found in Invensys Wonderware Information Server up to 4.0. This issue affects some unknown processing. Executing manipulation can lead to improper input validation. This vulnerability is handled as CVE-2014-5398. It is possible to launch the attack on the local host. There is not any exploit available.

A vulnerability, which was classified as critical, has been found in Invensys Wonderware Information Server up to 4.0. Impacted is an unknown function. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2014-5399. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability identified as critical has been detected in WPCOM Member Plugin up to 1.7.14 on WordPress. Affected by this issue is some unknown functionality of the component Shortcode Handler. The manipulation of the argument action leads to file inclusion. This vulnerability is referenced as CVE-2025-11920. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability described as problematic has been identified in Inactive Logout Plugin up to 3.5.5 on WordPress. This issue affects some unknown processing. Such manipulation of the argument ina_redirect_page_individual_user leads to cross site scripting. This vulnerability is listed as CVE-2025-11922. The attack may be performed from remote. There is no available exploit.

A vulnerability labeled as critical has been found in WP Legal Pages Policy Generator, Terms & Conditions Generator Plugin and Privacy Policy Generator, Terms & Conditions Generator Plugin up to 3.5.1 on WordPress. This affects the function disconnect_account_request. The manipulation results in missing authorization. This vulnerability is identified as CVE-2025-11816. The attack can be executed remotely. There is not any exploit available.

A vulnerability marked as problematic has been reported in Document Library Lite Plugin up to 1.1.6 on WordPress. This vulnerability affects the function dll_load_posts. This manipulation causes missing authorization. This vulnerability is tracked as CVE-2025-11174. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as critical has been found in Keras up to 3.11.3. This issue affects the function get_file of the component tar Handler. Performing manipulation results in path traversal. This vulnerability is cataloged as CVE-2025-12060. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Специалисты обнаружили уязвимости, превращающие удобство в угрозу личной безопасности.

A vulnerability was found in CivicTheme Design System up to 1.11.x on Drupal. It has been declared as critical. This issue affects some unknown processing. Executing manipulation can lead to incorrect authorization. This vulnerability is tracked as CVE-2025-12082. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Reverse Proxy Header up to 1.1.1 on Drupal. Affected by this vulnerability is an unknown functionality. The manipulation results in improper validation of consistency within input. This vulnerability was named CVE-2025-10929. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in JSON Field up to 1.4 on Drupal. The affected element is an unknown function. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2025-10926. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in Plausible Tracking up to 1.0.1 on Drupal. The impacted element is an unknown function. This manipulation causes cross site scripting. This vulnerability is registered as CVE-2025-10927. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Access Code up to 2.0.4 on Drupal. It has been classified as problematic. This vulnerability affects unknown code. Performing manipulation results in improper restriction of excessive authentication attempts. This vulnerability is identified as CVE-2025-10928. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability described as problematic has been identified in Currency up to 3.4.x on Drupal. Affected is an unknown function. Executing manipulation can lead to cross-site request forgery. This vulnerability appears as CVE-2025-10930. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

China-linked cyber-espionage actors tracked as 'Bronze Butler' (Tick) exploited a Motex Lanscope Endpoint Manager vulnerability as a zero-day to deploy an updated version of their Gokcpdoor malware. [...]

A China-linked APT group UNC6384 exploits a Windows zero-day in an active cyber espionage targeting European diplomats. Arctic Wolf Labs researchers uncovered a cyber espionage campaign by China-linked APT UNC6384 targeting diplomatic entities in Hungary, Belgium, and other EU nations. UNC6384 is a China-nexus actor recently detailed by Google TAG, has expanded from targeting Southeast […]

X Chat обещает приватность, которой никогда не было у конкурентов.

The Australian Signals Directorate (ASD) has issued a bulletin about ongoing cyber attacks targeting unpatched Cisco IOS XE devices in the country with a previously undocumented implant known as BADCANDY. The activity, per the intelligence agency, involves the exploitation of CVE-2023-20198 (CVSS score: 10.0), a critical vulnerability that allows a remote, unauthenticated attacker to create an

Anthropic признала процессуальную ошибку только после публичного скандала с отчётом безопасности.

新冠疫情爆发后，各国采取了封锁、社交距离和旅行限制等公共卫生措施，旨在通过避免密切接触减少病毒传播。根据发表在《科学》期刊上的一项研究，人类并非是唯一一种改变空间环境以降低疫情风险的动物。黑花园蚁（Lasius niger）会改变巢穴结构减缓疫情爆发——相当于昆虫版的社交隔离。研究人员首先观察了两组蚂蚁挖掘巢穴，然后让其中一组暴露在绿僵菌（Metarhizium brunneum）孢子中，利用 micro-CT 扫描巢穴在之后数天内的结构变化。研究团队发现，暴露在绿僵菌孢子的蚂蚁巢穴入口平均距离增加了约 6 毫米，在偏僻地方建造了更长更曲折的巢室，蚂蚁甚至挖掘了多条隧道，可能是为了避免接触而设置的替代运输路线。