Aggregator

A vulnerability was found in exempi up to 2.5.0. It has been classified as critical. Affected is an unknown function of the file WEBP_Support.cpp of the component webp File Handler. Performing manipulation results in buffer overflow. This vulnerability was named CVE-2020-18652. The attack may be initiated remotely. There is no available exploit. It is suggested to install a patch to address this issue.

A vulnerability, which was classified as critical, has been found in Cisco Secure Endpoint. This issue affects some unknown processing of the component ClamAV. This manipulation causes heap-based buffer overflow. This vulnerability is tracked as CVE-2025-20128. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0 and classified as problematic. The affected element is an unknown function of the file /index.php. The manipulation of the argument page results in cross site scripting. This vulnerability is identified as CVE-2025-10032. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability was found in itsourcecode Online Discussion Forum 1.0. It has been declared as critical. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. This vulnerability is listed as CVE-2025-10033. The attack may be performed from remote. In addition, an exploit is available.

Mozilla 宣布 Firefox 浏览器将于 2026 年 9 月停止支持 32 位 Linux 系统。Mozilla 称，大部分 Linux 发行版已经不再支持 32 位架构，在 Linux 平台维护 32 位 Firefox 日益困难和不可靠。为了集中精力，Mozilla 宣布将于 Firefox 144 之后停止支持 32 位 Linux，即 Firefox 145 将只支持 64 位 Linux。Mozilla 建议 32 位 Linux 用户升级到 64 位 Linux 使用 64 位 Firefox。如果用户无法立即升级，Firefox ESR 140 的安全更新将一直支持到 2026 年 9 月。

ИИ-профили, токсичные ответы и контент-фермы становятся новой нормой.

Reddit通知用户因IP地址请求过多被限流，建议等待后重试。如持续受限，可联系客服并提供账户信息及代码。

Investigations into the Nx "s1ngularity" NPM supply chain attack have unveiled a massive fallout, with thousands of account tokens and repository secrets leaked. [...]

Urgent security alert for SAP users! A critical vulnerability (CVE-2025-42957) allows attackers to take full control of your…

Reddit提示用户IP地址请求过多，访问受限，请等待几分钟后重试。若问题持续可联系客服并提供账户及代码3baebaef-51ad-49cd-84b7-c0291dc97d0e。

Qantas cuts executive bonuses by 15% after a July cyberattack exposed data of 5.7M people, despite reporting $1.5B profit last fiscal year. Qantas cuts executive bonuses by 15% after a July cyberattack that exposed data of 5.7M people, despite posting $1.5B profit in the last fiscal year. This case study demonstrates that a security breach […]

Reddit因IP地址请求过多限制访问，建议等待并提供联系方法解决问题。

A vulnerability labeled as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin/admin_forum/add_views.php. Executing manipulation of the argument ID can lead to sql injection. This vulnerability is registered as CVE-2025-10068. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Submit #644077 / VDB-322991

Новая «супергруппа» хакеров заявила о праве диктовать условия Google.

GhostAction supply chain attack hit 817 GitHub repositories, stealing 3,325 secrets including npm, PyPI, and DockerHub tokens.

喜报 | 我实验室在第十八届全国大学生信息安全竞赛中再获佳绩

From MechaHitler to Islamic Chatbots, AI Engines Are Writing the Script for Reality
AI sovereignty is the new data sovereignty, except now we’re arguing not just about who owns your data, but who gets to define reality. From MechaHitler to Islamic chatbots, AI is less about objective truth and more about who gets to write the script.