Aggregator

Submit #489857 / VDB-294861

Bogus websites advertising Google Chrome have been used to distribute malicious installers for a remote access trojan called ValleyRAT. The malware, first detected in 2023, is attributed to a threat actor tracked as Silver Fox, with prior attack campaigns primarily targeting Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China. "This actor has increasingly targeted key roles

A vulnerability, which was classified as problematic, has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2025-1084. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as problematic was found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected by this vulnerability is an unknown functionality of the component CORS Handler. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is known as CVE-2025-1083. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as problematic has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected is an unknown function of the file /api/admin/question/edit of the component Exam Edit Handler. The manipulation of the argument title/content leads to cross site scripting. This vulnerability is traded as CVE-2025-1082. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

看打铁花为什么会感受到心灵的震撼与惊喜，因为当外在的铁花与内在的心花心心相印，心之性也如花一般绽放于我们的生命内，心花怒放，吾心光明。

看打铁花为什么会感受到心灵的震撼与惊喜，因为当外在的铁花与内在的心花心心相印，心之性也如花一般绽放于我们的生命内，心花怒放，吾心光明。

看打铁花为什么会感受到心灵的震撼与惊喜，因为当外在的铁花与内在的心花心心相印，心之性也如花一般绽放于我们的生命内，心花怒放，吾心光明。

看打铁花为什么会感受到心灵的震撼与惊喜，因为当外在的铁花与内在的心花心心相印，心之性也如花一般绽放于我们的生命内，心花怒放，吾心光明。

看打铁花为什么会感受到心灵的震撼与惊喜，因为当外在的铁花与内在的心花心心相印，心之性也如花一般绽放于我们的生命内，心花怒放，吾心光明。

看打铁花为什么会感受到心灵的震撼与惊喜，因为当外在的铁花与内在的心花心心相印，心之性也如花一般绽放于我们的生命内，心花怒放，吾心光明。

看打铁花为什么会感受到心灵的震撼与惊喜，因为当外在的铁花与内在的心花心心相印，心之性也如花一般绽放于我们的生命内，心花怒放，吾心光明。

看打铁花为什么会感受到心灵的震撼与惊喜，因为当外在的铁花与内在的心花心心相印，心之性也如花一般绽放于我们的生命内，心花怒放，吾心光明。

Submit #489644 / VDB-294860

Submit #489634 / VDB-294859

Submit #489633 / VDB-294858

Испытания подтвердили эффективность роботов-сапёров.

A vulnerability was found in Bharti Airtel Xstream Fiber up to 20250123. It has been rated as problematic. This issue affects some unknown processing of the component WiFi Password Handler. The manipulation leads to use of weak credentials. The identification of this vulnerability is CVE-2025-1081. The attack needs to be done within the local network. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. It is recommended to change the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #488582 / VDB-294857