Aggregator

Withdrawal of Advanced Data Protection for British Users Could Have Global Impact
Apple's decision to withdraw iCloud end-to-end encryption in the United Kingdom has privacy and security advocates worried that the British government could scan and surveil sensitive information of Apple users worldwide. Apple on Friday deactivated its Advanced Data Protection feature in the U.K.

全方面多纬度介绍关于各类嵌入式设备、网络设备、边界安全设备等漏洞挖掘基础、方法、技巧和思路

CS2社区频遭直播劫持，玩家Steam账号与加密货币安全告急。

看雪论坛作者ID：TeddyBe4r

破解快速发展中的安全与合规难题

破解快速发展中的安全与合规难题

破解快速发展中的安全与合规难题

破解快速发展中的安全与合规难题

警惕AI滥用！360给大模型加上安全护栏

«ЭРА-Глонасс» представила технологию принудительной посадки беспилотников.

德尔塔面具（MagiskDelta），是一个开源的第三方 Magisk 框架，基于官方 Magisk 二次修改。

Как Северная Корея совершила крупнейшую кражу в истории криптовалют.

ROP实现RCE：这不是魔法，这是技术的魅力！

ROP实现RCE：这不是魔法，这是技术的魅力！

A vulnerability was found in zephyrproject-rtos Zephyr up to 4.0 and classified as problematic. This issue affects the function dns_copy_qname of the file dns_pack.c. The manipulation of the argument lb_size leads to out-of-bounds read. The identification of this vulnerability is CVE-2025-1675. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in techlabpro1 Classified Listing Plugin up to 4.0.4 on WordPress. This affects the function rtcl_taxonomy_settings_export. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2025-1063. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in wpeverest Everest Forms Plugin up to 3.0.9.4 on WordPress. Affected by this issue is the function format of the file EVF_Form_Fields_Upload of the component Path Validation Handler. The manipulation leads to unrestricted upload. This vulnerability is handled as CVE-2025-1128. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Red Hat OpenShift Container Platform 4. Affected by this vulnerability is an unknown functionality of the component ose-olm-catalogd-container. The manipulation leads to resource consumption. This vulnerability is known as CVE-2024-12698. The attack can be launched remotely. There is no exploit available.