Aggregator

由于当前环境出现异常，请完成验证以继续访问。

2025网安周：360护航AI产业出海，点亮昆明网络安全产业链！

2025网安周|七项荣誉！360获得国家监管机构高度认可

A vulnerability was found in HPE Aruba Networking EdgeConnect SD-WAN Gateway up to 9.4.3.7/9.5.3.6 and classified as problematic. The affected element is an unknown function of the component System File Handler. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2025-37131. The attack may be launched remotely. There is no exploit available.

A vulnerability identified as problematic has been detected in HPE Aruba Networking EdgeConnect SD-WAN Gateway up to 9.4.3.7/9.5.3.6. Affected by this vulnerability is an unknown functionality of the component Command-Line Interface. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2025-37130. It is possible to initiate the attack remotely. There is no exploit available.

美国公共领域近期网络威胁态势严峻

Добыча — логин без пароля и горсть скриншотов.

In early May 2025, Unit 42 researchers observed that AdaptixC2 was used to infect several systems. While many C2 frameworks garner public attention, AdaptixC2 has remained largely under the radar—until Unit 42 documented its deployment by real-world threat actors. This article examines AdaptixC2’s capabilities, recent infection scenarios, and guidance for defenders to anticipate and block […]

The post Hackers Exploit AdaptixC2, an Emerging Open-Source C2 Tool appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

速修复

当前环境出现异常状态，需完成验证后才能继续访问。

当前环境出现异常，需完成验证后方可继续访问。

A vulnerability categorized as critical has been discovered in Samsung Smart Phone. Impacted is the function TA_Communication_mpos_encrypt_pin of the component mPOS TUI Trustlet. Such manipulation leads to out-of-bounds write. This vulnerability is listed as CVE-2023-21499. The attack must be carried out locally. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in Samsung Smart Phone. The affected element is the function setPinPadImages of the component mPOS TUI Trustlet. Performing manipulation results in double free. This vulnerability is cataloged as CVE-2023-21500. The attack must be initiated from a local position. There is no exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Samsung Smart Phone. The impacted element is an unknown function of the component mPOS Fiserve Trustlet. Executing manipulation can lead to improper input validation. This vulnerability is registered as CVE-2023-21501. The attack needs to be launched locally. No exploit is available. The affected component should be upgraded.

A vulnerability was found in Samsung Smart Phone. It has been rated as critical. This issue affects the function setPartnerTAInfo of the component mPOS TUI Trustlet. This manipulation causes memory corruption. This vulnerability is tracked as CVE-2023-21498. The attack is restricted to local execution. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in Paraşüt up to 20250204. It has been classified as problematic. Impacted is an unknown function. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2025-0420. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in JetBrains TeamCity on Windows and classified as problematic. This issue affects some unknown processing of the component Git URL Validation Handler. The manipulation results in permissive list of allowed inputs. This vulnerability is identified as CVE-2025-59457. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in JetBrains TeamCity and classified as problematic. This vulnerability affects unknown code of the component Project Archive Upload Handler. The manipulation leads to relative path traversal. This vulnerability is referenced as CVE-2025-59456. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.