Aggregator

DeepSeek的崛起及其影响DeepSeek是一个中国AI研究实验室，发布了开源语言模型R1。

这篇文章的核心内容是探讨量子技术在军事和安全领域的应用及其对国际安全的影响。

A vulnerability classified as problematic was found in wangchenyi1996 chat_forum up to 80bdb92f5b460d36cab36e530a2c618acef5afd2. This impacts an unknown function of the file /q.php. Such manipulation of the argument path leads to cross site scripting. This vulnerability is traded as CVE-2025-10642. The attack may be launched remotely. There is no exploit available. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.

A vulnerability classified as critical has been found in WonderCMS 3.5.0. This affects the function curl_exec. This manipulation of the argument pluginThemeUrl causes server-side request forgery. This vulnerability appears as CVE-2025-57055. The attack may be initiated remotely. There is no available exploit.

A vulnerability described as problematic has been identified in KGOLDOV Apache::AuthAny up to 0.201 on Perl. The impacted element is the function rand. The manipulation results in generation of predictable numbers or identifiers. This vulnerability is reported as CVE-2025-40933. The attack can be launched remotely. No exploit exists.

Submit #651885 / VDB-324675

A vulnerability marked as problematic has been reported in Shopside App. The affected element is an unknown function. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2025-0879. The attack can be initiated remotely. There is not any exploit available. This product is a managed service, therefore users are not responsible for maintaining vulnerability countermeasures. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in SUSE neuvector up to 5.4.5. Impacted is an unknown function. Executing manipulation can lead to insufficiently protected credentials. This vulnerability is registered as CVE-2025-54467. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in Perplexity AI GPT-4. This issue affects some unknown processing of the component GET Parameter Handler. Performing manipulation results in information disclosure. This vulnerability is cataloged as CVE-2025-50709. It is possible to initiate the attack remotely. There is no exploit available.

带数字签名某远控木马分析

A vulnerability categorized as critical has been discovered in Jenkins up to 2.516.2/2.527. This vulnerability affects unknown code. Such manipulation leads to improper authentication. This vulnerability is listed as CVE-2025-59475. The attack must be carried out from within the local network. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability was found in Jenkins up to 2.515.x. It has been rated as problematic. This affects an unknown part. This manipulation causes improper output neutralization for logs. This vulnerability is tracked as CVE-2025-59476. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is advised.

Submit #650844 / VDB-320907

A vulnerability was found in Jenkins up to 2.386/2.516.2. It has been declared as critical. Affected by this issue is some unknown functionality. The manipulation results in permission issues. This vulnerability is identified as CVE-2025-59474. The attack can only be performed from the local network. There is not any exploit available. It is recommended to upgrade the affected component.

exp分析，动态调试，漏洞复现

A vulnerability was found in Nebula Informatics SecHard 3.3.0.20220411. It has been classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to authorization bypass. This vulnerability is referenced as CVE-2025-8463. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in SUSE neuvector up to 5.4.5 and classified as problematic. Affected is an unknown function of the component User Password Handler. Executing manipulation can lead to one-way hash without salt. The identification of this vulnerability is CVE-2025-53884. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Open5GS up to 2.7.5 and classified as problematic. This impacts the function parse_multipart in the library lib/sbi/message.c. Performing manipulation results in null pointer dereference. This vulnerability was named CVE-2025-55904. The attack needs to be approached within the local network. There is no available exploit. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as very critical, was found in SUSE neuvector up to 5.4.5. This affects an unknown function of the component Authentication Token Handler. Such manipulation leads to use of default password. This vulnerability is uniquely identified as CVE-2025-8077. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.