Aggregator

共同守护国家地理信息安全

意见反馈截止时间为2025年10月13日。

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. FBI warns of Salesforce attacks by UNC6040 and UNC6395 groups HybridPetya ransomware bypasses UEFI Secure Boot […]

截止受理日期为2025年9月22日

Name: DefCamp Capture the Flag (D-CTF) 2025 Quals (an Defcamp CTF Qualification event.)
Date: Sept. 12, 2025, 10 a.m. — 14 Sept. 2025, 10:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://dctf25-quals.cyber-edu.co/
Rating weight: 50.00
Event organizers: CCSIR.org

Name: FortID CTF 2025 (an TBTL CTF event.)
Date: Sept. 12, 2025, noon — 14 Sept. 2025, 12:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://fortid.ctfd.io/
Rating weight: 30.00
Event organizers: TBTL

Name: MaltaCTF 2025 Finals (an MaltaCTF event.)
Date: Sept. 13, 2025, 10 a.m. — 14 Sept. 2025, 10:00 UTC  [add to calendar]
Format: Jeopardy
On-site
Location: Valletta, Malta
Offical URL: https://2025.ctf.mt/
Rating weight: 0.00
Event organizers: if this doesn't work we'll get more for next year

Симулятор науки или ударная платформа? Китайские военные в панике.

关键词崩了在线流媒体与媒体串流服务 Plex 当地时间本月 9 日表示，该企业的一小部分用户数据遭遇未经授权的

关键词木马为保护公民个人信息，警方频频出击，对泄漏、倒卖公民个人信息的行为进行打击。近期，上海警方就接连破获多起相关案件。

研究人员对美国 23 种啤酒进行了测试，发现 95% 含有 PFAS。PFAS（全氟烷基和多氟烷基物质）涵盖约 9000 种化合物，主要用于制造防水、防污或耐热型产品。这类化学品被广泛应用于数十个行业产出的几千种日常消费品，包括防污剂、地毯以及鞋子。PFAS 被称为“永久留存的化学品”，因为它们不会自然分解。它们会在包括人类在内的各种动物体内积累，与癌症、新生儿缺陷、肝病、甲状腺疾病、免疫力下降、激素紊乱及其它一系列严重健康问题相关。尽管啤酒厂通常有水过滤和处理系统，但其设计不是旨在清除 PFAS。研究人员呼吁啤酒厂、消费者和监管机构提高认识，而啤酒厂可能需要升级水处理系统清除 PFAS。

Follow the top 20 programmers on Twitter for 2025! Get actionable coding tips, industry insights, and stay ahead on tech trends from leading developers.

The post Top 20 Programmers & Developers to Follow on Twitter for Coding Tips in 2025 appeared first on Security Boulevard.

A vulnerability, which was classified as critical, was found in Microsoft Exchange 5.5. The impacted element is an unknown function of the component Mail Connector. Such manipulation of the argument EHLO leads to memory corruption. This vulnerability is listed as CVE-2002-0698. The attack may be performed from remote. There is no available exploit. Applying a patch is advised to resolve this issue.

A vulnerability has been found in SurfControl Superscout Web Filter 3.0 and classified as critical. This affects an unknown part of the component Web Reports Server. The manipulation leads to information disclosure (Password). This vulnerability is listed as CVE-2002-0705. The attack may be initiated remotely. In addition, an exploit is available. It is recommended to add further authentication.

A vulnerability was found in Microsoft Windows up to XP. It has been rated as problematic. Affected is an unknown function of the component Certificate Enrollment ActiveX Control. The manipulation leads to an unknown weakness. This vulnerability is traded as CVE-2002-0699. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to install a patch to address this issue.

A vulnerability was found in SurfControl Superscout Web Filter 3.0. It has been declared as problematic. Impacted is an unknown function of the component Web Reports Server. Such manipulation with the input ... leads to path traversal. This vulnerability is documented as CVE-2002-0708. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability marked as critical has been reported in Microsoft Windows NT 4.0/2000. Impacted is an unknown function of the component SMB Handler. Performing manipulation as part of SMB_COM_TRANSACTION Packet results in memory corruption. This vulnerability is identified as CVE-2002-0724. The attack can be initiated remotely. Additionally, an exploit exists. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in PHP 4.2.0/4.2.1. This impacts an unknown function of the component HTTP POST Request Handler. Executing manipulation can lead to memory corruption. This vulnerability appears as CVE-2002-0717. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in Campcodes Computer Sales and Inventory System 1.0. It has been rated as critical. The impacted element is an unknown function of the file /pages/sup_searchfrm.php?action=edit. This manipulation of the argument ID causes sql injection. The identification of this vulnerability is CVE-2025-10436. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.