Aggregator

Clop

Dark Feed IO
5 months 2 weeks ago

You must login to view this content

cohenido

CVE-2024-0769

CVE Trends
5 months 2 weeks ago
Currently trending CVE - Hype Score: 1 - ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service ...

CVE-2025-50054

CVE Trends
5 months 2 weeks ago
Currently trending CVE - Hype Score: 18 - Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash

Kawa

Dark Feed IO
5 months 2 weeks ago

You must login to view this content

cohenido

笑声也会感染倭黑猩猩

Solidot
5 months 2 weeks ago
一项研究发现，倭黑猩猩在听到笑声后，更可能去接近一个平时不会触碰的东西。这项研究对 4 只经过训练的倭黑猩猩进行了监测，它们会根据盒子是否装有食物而与盒子互动或忽略盒子，这项研究表明，听到积极的声音可能会影响它们的觅食和搜索行为。在研究中，4 只倭猩猩被安排熟悉一个有食物奖励的黑盒子和一个空的白盒子，并被训练按一个按钮拒绝白盒子。此外，有 3 个“模棱两可”的盒子（浅灰、中灰和深灰）间歇呈现，在50% 的盒子中含有食物奖励。测试在播放倭猩猩笑声或环境风声的情况下进行，播放时间持续7分28秒。研究显示，倭猩猩在93%的情况下会接近黑盒子，仅在1%的情况下接近白盒子。而在提供灰色盒子时，倭黑猩猩接近深灰盒子的情况较浅灰的频繁。综合所有灰色盒子的试验结果，研究人员发现，倭灰猩猩在听到笑声录音后更容易检查灰色盒子，其接近灰盒子的概率较环境风声的情况高了3.4倍。研究人员认为，笑声可能引发了倭黑猩猩的情感共鸣，影响了它们的行为，使其更容易接近一个模棱两可的刺激物。

Nederlandse Veteranendag dit jaar zonder defilé

Defensie.nl - Nieuwsberichten
5 months 2 weeks ago
Een aankondiging op tv maakte Nederland er al op attent. De Nederlandse Veteranendag dient zich aan. Morgen speelt die zich volledig af op het Malieveld. Deze 21e editie is dus zonder defilé door de Haagse binnenstad en daardoor anders dan normaal. Toch zullen ook nu oude en jonge maten elkaar weer omarmen. Oude herinneringen over operaties in landen waar ze namens Nederland dienden, komen weer boven. 

The Early Stage Growth Trap: How Smart Startups Escape the Marketing Catch-22

Security Boulevard
5 months 2 weeks ago

Early stage startups face a brutal dilemma: you need marketing expertise and budget to grow, but lack both. Discover how programmatic SEO breaks this cycle by automating top-of-funnel growth and building long-term SEO authority for B2B SaaS companies.

The post The Early Stage Growth Trap: How Smart Startups Escape the Marketing Catch-22 appeared first on Security Boulevard.

Deepak Gupta - Tech Entrepreneur, Cybersecurity Author

数字主权始于桌面：欧洲 Linux 桌面时代有望到来

Solidot
5 months 2 weeks ago
Windows 10 即将终止支持，以及微软听命于美国政府制裁国际刑事法院首席检察官等事件给欧洲国家敲响了警钟，切换到 Linux 桌面将有助于安全和隐私保护，也有助于维护欧洲的数字主权。法国宪兵队在十多年前就成功切换到了基于 Ubuntu 的定制发行版 GendBuntu。一部分人人提议为欧盟组织开发一个专门的发行版 EU OS。该发行版将基于 Red Hat 社区发行版 Fedora KDE Linux。

CVE-2025-6766 | sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8 OfficeServiceImpl.java getOfficeName officesName sql injection (Issue 108 / EUVD-2025-19329)

Vuldb Updates
5 months 2 weeks ago
A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. It has been declared as critical. This vulnerability affects the function getOfficeName of the file OfficeServiceImpl.java. The manipulation of the argument officesName leads to sql injection. This vulnerability was named CVE-2025-6766. The attack can be initiated remotely. Furthermore, there is an exploit available. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
vuldb.com

CVE-2025-40910 | TPODER Net::IP::LPM 1.10 on Perl IP CIDR Address String improper validation of specified type of input (EUVD-2025-19330)

Vuldb Updates
5 months 2 weeks ago
A vulnerability was found in TPODER Net::IP::LPM 1.10 on Perl. It has been declared as problematic. This vulnerability affects unknown code of the component IP CIDR Address String Handler. The manipulation leads to improper validation of specified type of input. This vulnerability was named CVE-2025-40910. The attack can be initiated remotely. There is no exploit available.
vuldb.com

CVE-2025-6767 | sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8 DoctorServiceImpl.java findDoctorByCondition hospitalName sql injection (Issue 109 / EUVD-2025-19326)

Vuldb Updates
5 months 2 weeks ago
A vulnerability was found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. It has been rated as critical. This issue affects the function findDoctorByCondition of the file DoctorServiceImpl.java. The manipulation of the argument hospitalName leads to sql injection. The identification of this vulnerability is CVE-2025-6767. The attack may be initiated remotely. Furthermore, there is an exploit available. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
vuldb.com

CVE-2025-53018 | Lychee up to 6.6.12 /api/v2/Photo::fromUrl fopen server-side request forgery (GHSA-cpgw-wgf3-xc6v / EUVD-2025-19328)

Vuldb Updates
5 months 2 weeks ago
A vulnerability was found in Lychee up to 6.6.12. It has been rated as problematic. Affected by this issue is the function fopen of the file /api/v2/Photo::fromUrl. The manipulation leads to server-side request forgery. This vulnerability is handled as CVE-2025-53018. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad