Aggregator

A vulnerability labeled as critical has been found in Trimble Cityworks up to 23.9. This impacts an unknown function of the component MS IIS. The manipulation results in deserialization. This vulnerability is cataloged as CVE-2025-0994. The attack may be launched remotely. Furthermore, there is an exploit available. The affected component should be upgraded.

Cybercriminals are abusing AdaptixC2, a legitimate emulation framework, in ransomware campaigns

暗网空间测绘 by ourren

匿名通信基础知识 by ourren

使用Overpass Turbo进行战略网络战情报收集 by ourren

安全运营体系建设：从合规到融合，三步走稳扎稳打 by ourren

锁定ORB网络PolarEdge的关键拼图: RPX中继系统浮出水面 by ourren

Bellingcat在线调查模式研究（2014-2024） by ourren

AI辅助逆向APP白盒AES分析 by ourren

反入侵 Pipeline by swim

更多最新文章，请访问SecWiki

A vulnerability marked as problematic has been reported in automatic1111 stable-diffusion-webui. This impacts an unknown function of the component HTML File Handler. Performing manipulation results in HTML injection. This vulnerability is reported as CVE-2024-12374. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as critical was found in Linux Kernel up to 6.1.129/6.6.80/6.12.17/6.13.5. This affects the function uprobe_write_opcode. Executing manipulation can lead to improper update of reference count. This vulnerability is tracked as CVE-2025-21881. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is advised.

In a timely response to escalating threats against email infrastructure, the Cybersecurity and Infrastructure Security Agency (CISA), alongside the National Security Agency (NSA), Australian Cyber Security Centre (ACSC), and Canadian Centre for Cyber Security, released a comprehensive guide on October 2025 outlining best practices for securing on-premises Microsoft Exchange Servers. Titled “Microsoft Exchange Server Security […]

The post CISA Releases Best Security Practices Guide for Hardening Microsoft Exchange Server appeared first on Cyber Security News.

A vulnerability was found in Linux Kernel up to 6.6.111/6.12.52/6.17.2. It has been rated as critical. Affected by this vulnerability is the function gsm_queue. This manipulation causes privilege escalation. This vulnerability appears as CVE-2025-40071. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is advised.

Хакеры снова используют небрежную настройку и устаревшие прошивки IoT, чтобы получить контроль над облаками.

在 TechCrunch Disrupt 2025 大会上，Waymo 联席 CEO Tekedra Mawakana 表示，社会最终会接受自动驾驶出租车导致的致命车祸，以此作为提升公路整体安全性的必要代价。在大会上 Mawakana 被问到如果 Waymo 等自动驾驶汽车公司减少了美国的交通死亡人数，但最终导致了一起致命车祸，社会会接受吗？Mawakana 认为社会会接受，挑战在于社会需要设定严格的安全标准，以确保企业承担起相应的安全责任。企业必须透明，公开车祸相关的数据。她说，自动驾驶汽车将大幅减少事故，但无法完全消除。车祸不是不会发生，而是何时发生，企业需要为此做好准备。 

A vulnerability was found in Salesforce Tableau Server up to 2023.3.18/2024.2.11/2025.1.2 and classified as critical. This affects an unknown part of the component create-data-source-from-file-upload. Executing manipulation can lead to path traversal. This vulnerability is handled as CVE-2025-52451. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A pattern appeared in the monitoring dashboard that indicated a classic DDoS attack. A trading platform was the target of massive web requests: there were two distinct traffic spikes in quick succession, both large enough to bring down an unprotected website. Let’s take a closer look at the larger of the two traffic spikes.  The measured peak values were around 16 […]

The post How a global botnet attacked a trading platform appeared first on Link11.

Currently trending CVE - Hype Score: 7 - Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage ...

Currently trending CVE - Hype Score: 9 - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was ...

A vulnerability was found in Qzzr Shortcode Plugin up to 1.0.1 on WordPress. It has been classified as problematic. This issue affects the function qzzr of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-11806. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in FuseWP Plugin up to 1.1.23.0 on WordPress and classified as critical. This vulnerability affects the function save_changes. Executing manipulation can lead to missing authorization. This vulnerability is handled as CVE-2025-11975. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in Zoho ManageEngine Exchange Reporter Plus up to 5722 and classified as problematic. This affects an unknown part of the component Reports Module. Performing manipulation results in cross site scripting. This vulnerability is known as CVE-2025-5347. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in Zoho ManageEngine Exchange Reporter Plus up to 5721. Affected by this issue is some unknown functionality of the component Instant Search Option. Such manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-5343. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Zoho ManageEngine Exchange Reporter Plus up to 5721. Affected by this vulnerability is an unknown functionality of the component Search Module. This manipulation causes inefficient regular expression complexity. This vulnerability appears as CVE-2025-5342. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as critical was found in iib0011 omni-tools 0.4.0. Affected is an unknown function of the component JSON Handler. The manipulation results in deserialization. This vulnerability is reported as CVE-2025-50739. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical has been found in Dell Unity up to 5.5.1. This impacts an unknown function. The manipulation leads to os command injection. This vulnerability is documented as CVE-2025-43942. The attack needs to be performed locally. There is not any exploit available. It is recommended to upgrade the affected component.