Aggregator

/r/netsec 是一个由社区管理的技术信息安全聚合平台，旨在为安全从业者、学生、研究人员和黑客提供有价值的信息资源。

A critical vulnerability in HashiCorp Vault—tracked as CVE-2025-6203 and HCSEC-2025-24—has been disclosed that allows malicious actors to submit specially crafted payloads capable of exhausting server resources and rendering Vault instances unresponsive. The flaw affects both Vault Community and Enterprise editions, spanning versions 1.15.0 through 1.20.2 (with select earlier patch versions), and was publicly disclosed on […]

The post HashiCorp Vault Vulnerability Allows Attackers to Crash Servers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Von der Leyen’s plane faced suspected Russian GPS jamming in Bulgaria, but the EU chief landed safely, says European Commission. The EU confirmed that Ursula von der Leyen’s plane experienced GPS jamming while flying to Bulgaria. The European authorities suspect Russian interference, though the aircraft landed safely. Bulgarian officials provided the information, and the EU […]

对于席卷硅谷的 AI 人才争夺战，亚马逊基本上是袖手旁观。根据电商巨头 HR 团队去年底撰写的一份内部文件，总结了在 AI 人才招聘上的不利因素，包括地理位置、薪酬以及在 AI 领域明显落后等。相比下竞争对手则通常会提供更全面、更激进的薪酬待遇。亚马逊以节俭著称。它的一个起源故事是从家得宝（Home Depot）购买廉价门然后将其改装成办公桌。据说 Jeff Bezos 至今仍在使用这种改装过的办公桌。

一位女性因前夫猜出其手机密码并进入Google Drive查看其私密照片和视频而感到困扰，她希望利用备份手机删除相关内容，并询问如何破解Pixel 9的四位密码。

A vulnerability was found in NetMechanica NetDecision 4.5.1. It has been rated as problematic. The affected element is an unknown function. The manipulation leads to information disclosure. This vulnerability is listed as CVE-2012-1466. The attack may be initiated remotely. In addition, an exploit is available. Upgrading the affected component is advised.

A vulnerability identified as critical has been detected in Novell NetIQ 2.3.0/2.3.1. This vulnerability affects the function set_log_config in the library regclnt.dll of the file unifid.exe of the component Privileged User Manager. This manipulation with the input ../../ causes path traversal. The identification of this vulnerability is CVE-2012-5931. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. You should upgrade the affected component.

A vulnerability was found in Novell File Reporter 1.0.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file NFRAgent.exe. The manipulation results in path traversal. This vulnerability is cataloged as CVE-2012-4958. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Novell File Reporter 1.0.2. It has been classified as problematic. Affected is an unknown function of the file NFRAgent.exe. The manipulation leads to path traversal. This vulnerability is listed as CVE-2012-4957. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in NetMechanica NetDecision 4.5.1. It has been classified as problematic. This issue affects some unknown processing of the component Installation. Performing manipulation results in information disclosure. This vulnerability is identified as CVE-2012-1464. The attack can be initiated remotely. Additionally, an exploit exists. Upgrading the affected component is recommended.

A vulnerability categorized as critical has been discovered in Novell NetIQ 2.3.0/2.3.1. This affects the function ldapagnt_eval in the library ldapagnt.dll of the file unifid.exe of the component Privileged User Manager. The manipulation as part of Perl Code results in code injection. This vulnerability was named CVE-2012-5932. The attack may be performed from remote. In addition, an exploit is available. It is advisable to upgrade the affected component.

Exposing an ASP.NET Core appsettings.json file containing Azure Active Directory (Azure AD) credentials poses a critical attack vector, effectively handing adversaries the keys to an organization’s cloud environment. During a recent cybersecurity assessment by Resecurity’s HUNTER Team, researchers discovered that a publicly accessible appsettings.json file had exposed the ClientId and ClientSecret of an Azure AD application, […]

The post Azure AD Vulnerability Leaks Credentials, Lets Attackers Deploy Malicious Apps appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

In a novel twist on the year-long trend of ClickFix scams, threat actors have blended human-verification social engineering with the Windows search protocol to deliver MetaStealer, a commodity infostealer notorious for harvesting credentials and exfiltrating sensitive files. While the attack superficially resembles classic ClickFix and FileFix techniques, its unique infection chain—from a fake AnyDesk installer […]

The post Threat Actors Exploit Windows Search in AnyDesk ClickFix Attack to Spread MetaStealer appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Экстренный план действий, когда технологии подводят, а любовь к близким требует немедленного решения.

Rovo Dev CLI 是 Atlassian 推出的命令行 AI 开发工具，支持 Claude Sonnet 4 和 GPT-5 模型，提供每日 2000 万免费 Token。支持 Windows、macOS 和 Linux 系统安装，需注册 Atlassian 账号并获取 API Key 后使用。

A vulnerability, which was classified as problematic, has been found in mrtgconfig 0.5.9. Impacted is an unknown function of the file 14all.cgi of the component Error Message Handler. This manipulation of the argument cfg causes information disclosure (Path). This vulnerability is handled as CVE-2002-1677. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in Jelsoft vBulletin up to 2.2.4. The affected element is an unknown function of the file memberlist.php. Such manipulation of the argument $letterbits leads to basic cross site scripting. This vulnerability is uniquely identified as CVE-2002-1678. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as critical, has been found in phpBB up to 2.0.1. Affected by this vulnerability is an unknown functionality of the file install.php. The manipulation of the argument phpbb_root_dir leads to improper privilege management. This vulnerability is traded as CVE-2002-1707. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability labeled as problematic has been found in Deltascripts Php Classifieds 6.0.5. The affected element is an unknown function. The manipulation of the argument URL results in basic cross site scripting. This vulnerability is cataloged as CVE-2002-1702. The attack may be launched remotely. Furthermore, there is an exploit available.

OnionC2 is a command and control (C2) framework with communications over Tor network. It’s packed with privacy &

The post OnionC2: The New C&C Framework for Anonymous Cyber Operations appeared first on Penetration Testing Tools.