Aggregator

A vulnerability, which was classified as critical, has been found in emarket-design Customer Support Ticket System & Helpdesk Plugin up to 6.0.4 on WordPress. This affects the function wp_ticket_com_posts_request of the component Query Parameter Handler. This manipulation causes sql injection. This vulnerability is registered as CVE-2026-9848. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

Зачем нужны огромные луноходы, когда есть SORA-Q размером с мяч?

Anthropic has suspended access to its two most capable AI models, Fable 5 and Mythos 5, for

The US government has ordered Anthropic to block all foreign nationals from accessing Fable 5 and Mythos 5, forcing the company to suspend both models worldwide. Anthropic is complying but disputes the basis, calling the cited jailbreak narrow and the capability widely available elsewhere. [...]

银狐黑产组织最新攻击趋势深度分析报告

HumanBug15 年实战经验，手把手教落地

看雪论坛作者ID：不歪

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

随着汽车行业在如何让欧洲应对价格实惠的中国纯电动汽车崛起这一问题上出现分歧之际，雷诺与斯泰兰蒂斯和大众联手，大力推动“欧盟制造”生产目标。在周五提交给欧洲议会议员和决策者的提案中，这三家汽车制造商呼吁

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle PeopleSoft Enterprise PeopleTools flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Oracle PeopleSoft Enterprise PeopleTools flaw, tracked as CVE-2026-35273 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. Oracle PeopleSoft Enterprise PeopleTools is the underlying technology platform […]

U.S. CISA adds Oracle PeopleSoft Enterprise PeopleTools flaw to its Known Exploited V

爱媛高级柑橘树苗“红公主”惊现中国电商6月12日 周五，日本农相铃木宪和在内阁会议后的记者会上表示，爱媛县研发的高级柑橘“红Princess”的树苗可能已流向中国。现已确认中国种苗类电商平台正以类似名

Новая реальность контентных платформ.

A vulnerability was found in DTStack Taier up to 1.4.0. It has been declared as critical. The affected element is the function preHandle of the file taier-data-develop/src/main/java/com/dtstack/taier/develop/interceptor/LoginInterceptor.java of the component Source Connection Test Endpoint. Executing a manipulation can lead to improper authentication. This vulnerability appears as CVE-2026-11618. The attack may be performed from remote. In addition, an exploit is available. A patch should be applied to remediate this issue.

A vulnerability was found in Dolibarr ERP CRM up to 23.0.2. It has been rated as critical. The impacted element is an unknown function of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy Filemanager. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2026-11619. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. Upgrading the affected component is advised.

A vulnerability categorized as critical has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege violation. This vulnerability is known as CVE-2026-11620. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in Google Chrome on Linux and classified as critical. The impacted element is an unknown function of the component Ozone. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2026-11681. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Google Chrome on Linux. Affected by this vulnerability is an unknown functionality of the component Views. Such manipulation leads to sandbox issue. This vulnerability is traded as CVE-2026-11682. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.