Aggregator

A vulnerability was found in EmailKit Plugin up to 1.6.1 on WordPress. It has been rated as critical. This impacts the function create_template of the component REST API Endpoint. The manipulation leads to path traversal. This vulnerability is traded as CVE-2025-14059. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Reviewify Plugin up to 1.0.6 on WordPress. Affected is the function send_test_email of the component Coupon Handler. The manipulation results in missing authorization. This vulnerability is reported as CVE-2025-14070. The attack can be launched remotely. No exploit exists.

A vulnerability was found in Viitor Button Shortcodes Plugin up to 3.0.0 on WordPress and classified as problematic. This impacts the function Link of the component Shortcode Handler. Such manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-14113. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in WP Js List Pages Shortcodes Plugin up to 1.21 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function Class of the component Shortcode Attribute Handler. Executing a manipulation can lead to cross site scripting. This vulnerability is handled as CVE-2025-14110. The attack can be executed remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in Arconix Shortcodes Plugin up to 1.1.1 on WordPress. This issue affects the function Class of the component Shortcode Handler. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2025-14114. It is possible to launch the attack remotely. No exploit is available.

A vulnerability classified as problematic has been found in Multi-Column Tag Map Plugin up to 17.0.39 on WordPress. The impacted element is an unknown function of the component Setting Handler. The manipulation of the argument mctm_css_conditional leads to cross site scripting. This vulnerability is listed as CVE-2025-14057. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as problematic, was found in AH Shortcodes Plugin up to 1.0.2 on WordPress. Affected is the function column of the component Shortcode Handler. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2025-14109. The attack can be executed remotely. There is not any exploit available.

A vulnerability has been found in Simcast Plugin up to 1.0.0 on WordPress and classified as problematic. Affected by this vulnerability is the function settingsPage of the component Setting Handler. Performing a manipulation results in cross-site request forgery. This vulnerability is reported as CVE-2025-14077. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Snillrik Restaurant Plugin up to 2.2.1 on WordPress. It has been classified as problematic. This affects the function menu_style of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-14112. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in SohuTV CacheCloud up to 3.2.0 and classified as problematic. This impacts the function doUserList of the file src/main/java/com/sohu/cache/web/controller/UserManageController.java. Performing a manipulation results in cross site scripting. This vulnerability was named CVE-2025-15146. The attack may be initiated remotely. In addition, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability classified as critical has been found in FFmpeg N113007-g8d24a28d06. This vulnerability affects unknown code of the file libavfilter/af_stereowiden.c. This manipulation causes buffer overflow. This vulnerability is tracked as CVE-2023-51794. The attack is possible to be carried out remotely. No exploit exists.

Автономным системам обещают «всепогодное зрение» с угловым разрешением 0,13 градуса и дальностью почти километр.

索尼 PS1 模拟器项目 ePSXe 模拟器在时隔近十年后释出了新版本 ePSXe 2.0.18。该项目上个版本是在 2016 年释出的。目前更新更频繁更流行的 PS1 模拟器是 DuckStation。ePSXe 2.0.18 的主要变化包括：支持 CHD 格式的 ISO 镜像；支持 DPI Awareness，修复了未启用该功能时高分辨率显示问题；修复读取配置时如未选择超频值模拟器会崩溃的 bug；改进 SPUCORE 的混响和音量管理，修复了《Ghost in the Shell》、《Dinocrisis 1 & 2》、《Wipeout》、《DW7》和《DQ4》等游戏的问题；改进了《侍魂 III》等游戏的兼容性，等等。

A sophisticated Go-based botnet dubbed GoBruteforcer is aggressively targeting Linux servers worldwide, brute-forcing weak passwords on internet-exposed services including FTP, MySQL, PostgreSQL, and phpMyAdmin. Check Point Research recently documented a new 2025 variant of the malware that demonstrates significant technical improvements over previous versions and has successfully compromised tens of thousands of servers.​ The botnet […]

The post GoBruteforcer Botnet Attacking Linux Servers Worldwide – 50,000 Internet-facing Servers at Risk appeared first on Cyber Security News.

360独家发布《银狐木马年度报告》，深度剖析网络威胁“隐形炸弹”重磅发布｜洞见未来 · 2025年互联网反欺诈

ANY.RUN, the interactive malware analysis platform, has wrapped up 2025 with impressive growth figures and significant contributions to the cybersecurity community. The company’s annual report reveals how its global user base collectively spent over 400,000 hours analyzing threats—equivalent to more than 45 years of continuous research. The platform processed 5.7 million analyses across 195 countries […]

The post From Tycoon2FA to Lazarus Group – Inside ANY.RUN’s Biggest Discoveries of 2025 appeared first on Cyber Security News.

File-sharing platform ownCloud warned users today to enable multi-factor authentication (MFA) to block attackers using compromised credentials from stealing their data. [...]

根据已购地块但尚未宣布、在建或已公开规划的数据中心的数据，全球逾半数新数据中心位于美国。这些数据可能还低估了美国的主导地位，美国数据中心的平均规模通常大于其它国家。中国在建数据中心数量可能也低估了，因为中国不公开宣布数据中心规划。目前全球在建数据中心共 1947 个，美国新数据中心有 55% 位于弗吉尼亚、德州、伊利诺伊州、佐治亚州和亚利桑那州，其中 108 个新数据中心属于亚马逊 AWS，微软 84 个，Google 36 个。

A vulnerability described as problematic has been identified in Plexus anblick Digital Signage Management 3.1.13. The affected element is an unknown function of the component PantallaLogin. The manipulation of the argument pagina results in open redirect. This vulnerability was named CVE-2020-36912. The attack may be performed from remote. There is no available exploit.