Aggregator

Name: DownUnderCTF 2025 (an DownUnderCTF event.)
Date: July 18, 2025, 9:30 a.m. — 20 July 2025, 09:30 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://2025.duc.tf/
Rating weight: 91.66
Event organizers: DownUnderCTF

OpenAI решил не делиться своим самым умным ИИ — пока.

Debian 发布团队宣布 Debian 13.0 "Trixie"计划于 8 月 9 日释出，7 月 27 日完全冻结。Debian Trixie 代表了为期两年的开发历程，内核采用 Linux 6.12 LTS，包含桌面环境 GNOME 48 、GCC 14.2 编译器、Python 3.13 等大量软件更新。Debian Trixie 将首次正式支持 64 位 RISC-V 架构。

Шпионский инструмент из Китая работает с 2019 года.

A vulnerability classified as critical has been found in Linux Kernel up to 6.12.21/6.13.9/6.14.0. Affected is an unknown function of the component xhci_hcd. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2025-22022. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.21/6.13.9/6.14.0. It has been classified as critical. This affects an unknown part of the component xhci. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2025-22023. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.128/6.6.78/6.12.15/6.13.3/6.14-rc2. Affected by this issue is the function might_sleep. The manipulation leads to deadlock. This vulnerability is handled as CVE-2025-21823. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 6.14.0. Affected by this vulnerability is the function nf_sk_lookup_slow_v4 of the component netfilter. The manipulation leads to privilege escalation. This vulnerability is known as CVE-2025-22021. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

对数据库 Dimensions 的分析发现，与 AI 相关的研究论文数量已从 2000 年的不到 8500 篇增长到 2024 年的 5.7 万多篇。2000 年，中国学者仅发表了 671 篇 AI 论文，但到 2024 年，他们发表了 23695 篇与 AI 相关的论文，超过了美国（6378篇）、英国（2747篇）和欧盟（10055篇）的总和。中国产生的海量AI论文也推动了创纪录的专利申请。2024 年中国研究人员提交了 35423 项与 AI 相关的专利申请，是美国、英国、加拿大、日本、韩国5国提交的专利申请总数（2678项）的 13 倍多。研究还显示，中国的 AI研 究正变得越来越独立。过去几年中，美国、英国和欧盟的科学家与中国学者共同撰写论文的频率比他们彼此间合著的频率更高。但在 4 个地区中，中国学者的国际合作率最低。随着中国庞大的 AI 研究队伍的成熟，国际合作可能会进一步减少。研究发现，中国拥有约 3 万名各个年龄段的 AI 研究人员，而美国约有 1 万名。中国的 AI 研究队伍也明显更年轻。

Hewlett-Packard Enterprise (HPE) is warning of hardcoded credentials in Aruba Instant On Access Points that allow attackers to bypass normal device authentication and access the web interface. [...]

A vulnerability was found in Linux Kernel up to 6.12.21/6.13.9/6.14.1. It has been rated as critical. This issue affects the function bch2_ioctl_subvolume_destroy of the component bcachefs. The manipulation leads to permission issues. The identification of this vulnerability is CVE-2025-22019. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.14.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component rtsx_usb_ms. The manipulation leads to use after free. This vulnerability is known as CVE-2025-22020. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.15/6.13.3/6.14-rc2. It has been classified as problematic. Affected is an unknown function of the file kernel/locking/mutex.c. The manipulation leads to uninitialized pointer. This vulnerability is traded as CVE-2025-21824. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.128/6.6.78/6.12.15/6.13.3. Affected is the function usb_f_ecm of the component fbdev. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2025-21821. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.21/6.13.9. It has been declared as problematic. This vulnerability affects the function init of the component nfsd. The manipulation leads to improper initialization. This vulnerability was named CVE-2024-58092. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.1.112/6.6.54/6.10.13/6.11.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component hci_event. The manipulation leads to privilege escalation. This vulnerability is known as CVE-2024-53144. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.128/6.6.77/6.12.13/6.13.2/6.14-rc1. It has been rated as problematic. This issue affects some unknown processing of the component AMD Display. The manipulation leads to privilege escalation. The identification of this vulnerability is CVE-2025-21819. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.13.2. This affects the function store. The manipulation leads to deadlock. This vulnerability is uniquely identified as CVE-2025-21817. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.128/6.6.77/6.12.13/6.13.2. This affects the function cdns_uart_isr of the component xilinx_uartps. The manipulation leads to deadlock. This vulnerability is uniquely identified as CVE-2025-21820. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was suspected in Linux Kernel up to 6.1.128/6.6.77/6.12.13/6.13.2/6.14-rc1. Further investigation has shown that this issues is a false-positive. Please review the sources mentioned and consider not using this entry at all.