Aggregator

A vulnerability was found in Tracker Software PDF-XChange Editor. It has been rated as problematic. Affected is an unknown function of the component WMF File Parser. This manipulation causes out-of-bounds read. The identification of this vulnerability is CVE-2022-37352. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as problematic, was found in Tracker Software PDF-XChange Editor. The impacted element is an unknown function of the component Collab Handler. Such manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2022-37350. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Tracker Software PDF-XChange Editor. Affected by this vulnerability is an unknown functionality of the component J2K File Parser. Such manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2022-37351. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Tracker Software PDF-XChange Editor. It has been classified as problematic. This impacts the function submitForm. Performing a manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2022-37349. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Sangoma Asterisk. This vulnerability affects unknown code of the file addons/ooh323c/src/ooq931.c of the component Setup Message Handler. This manipulation causes denial of service. This vulnerability is registered as CVE-2022-37325. The attack requires access to the local network. No exploit is available.

A vulnerability categorized as problematic has been discovered in Docker Desktop up to 4.5.x on Windows. This affects the function WindowsContainerStartRequest of the component dockerBackendV2 API. Executing a manipulation of the argument pidfile can lead to privilege escalation. This vulnerability is registered as CVE-2022-37326. The attack requires access to the local network. No exploit is available. It is advisable to upgrade the affected component.

Интерпол раскрыл темную сторону цифровой экономики.

近日，全国网络安全标准化技术委员会组织制定了《网络安全标准实践指南—网络安全标识 消费类网联摄像头安全要求》。

6月17日，知道创宇举办“国产安全为基，开源内网提效”AI战略升级暨新产品发布会，正式发布AiPy网安专版与AiPy企业版两款战略级产品。

监测发现，近日一款伪装成中国公安机关对外提供服务的“公安一网通办”恶意APP在互联网上传播，下载地址为110GongAn.com，IP地址为207.56.30.188。

为电信网络诈骗违法犯罪提供帮助，严重危害人民群众财产安全。为强化以案释法、有力震慑犯罪，公安部6月18日公布5起依法联合惩戒电信网络诈骗及其关联违法犯罪的典型案例。

“复兴杯”第五届全国大学生网络安全精英赛总决赛日前圆满落幕，通过网络安全意识与法律法规、网络安全攻防、人工智能应用与安全三大赛道，给出了一份颇具参考价值的答卷。

为深入贯彻党中央、国务院决策部署，落实中央经济工作会议、中央金融工作会议精神，推动银行业保险业扎实做好人工智能技术应用和风险防控，金融监管总局近日发布《关于银行业保险业人工智能安全开发应用的指导意见》。

意见反馈截止时间为2026年7月18日。

在平台社会背景下，互联网已深度嵌入未成年人的学习、社交与日常生活，成为影响其成长轨迹的重要环境变量。“罪错未成年人”这一概念将实施了从轻微不良行为到严重犯罪等一系列越轨行为的未成年人，整体纳入重点教育、矫治与保护的关注范畴。

Cybersecurity company F5 has released out-of-band security updates to address multiple NGINX web server vulnerabilities, including two critical-severity flaws that could allow attackers to execute code on vulnerable systems. [...]

A vulnerability was found in Google Chrome. It has been rated as problematic. Impacted is an unknown function of the component Passwords. This manipulation causes permissive cross-domain policy with untrusted domains. This vulnerability is tracked as CVE-2026-12446. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability has been found in OpenCPN 5.12.0 and classified as critical. This affects the function wxExecute. The manipulation leads to code injection. This vulnerability is documented as CVE-2025-56814. The attack needs to be performed locally. There is not any exploit available.

A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 151. This issue affects some unknown processing. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2026-12326. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability labeled as problematic has been found in Google Chrome on Windows. This vulnerability affects unknown code of the component WebRTC. Such manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2026-12461. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.