Notepad++ теперь открывает не только текстовые файлы, но и двери для хакеров
Matanbuchus не пишет на диск, не требует прав, но всё равно получает контроль.
Aggregator
精选2：揭秘淘宝如何扛住双11的亿级高并发请求（14次架构演进全纪录·下篇）
2 months 1 week ago
Part1 前言 大家好，我是ABC_123。欢迎大家关注ABC_123运营的第2个公众号"希水涵精选录"
Massive Data Leak: ThreatSec Claims Breach of State Bank of India
2 months 1 week ago
You must login to view this content
cohenido
CVE-2025-41237 | VMware Cloud Foundation Virtual Machine Communication Interface out-of-bounds write (Nessus ID 242168 / WID-SEC-2025-1576)
2 months 1 week ago
A vulnerability was found in VMware Cloud Foundation, vSphere Foundation, ESXi, Workstation, Fusion, Telco Cloud Platform and Telco Cloud Infrastructure. It has been classified as critical. This affects an unknown part of the component Virtual Machine Communication Interface. The manipulation leads to out-of-bounds write.
This vulnerability is uniquely identified as CVE-2025-41237. Local access is required to approach this attack. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-41239 | VMware ESXi vSockets uninitialized resource (Nessus ID 242168 / WID-SEC-2025-1576)
2 months 1 week ago
A vulnerability was found in VMware ESXi, Cloud Foundation, Workstation, Fusion, Telco Cloud Platform, Telco Cloud Infrastructure and Tools. It has been rated as problematic. This issue affects some unknown processing of the component vSockets. The manipulation leads to uninitialized resource.
The identification of this vulnerability is CVE-2025-41239. It is possible to launch the attack on the local host. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-41236 | VMware ESXi VMXNET3 Virtual Network Adapter out-of-bounds write (Nessus ID 242168 / WID-SEC-2025-1576)
2 months 1 week ago
A vulnerability classified as critical has been found in VMware ESXi, Cloud Foundation, Workstation, Fusion, Telco Cloud Platform and Telco Cloud Infrastructure. Affected is an unknown function of the component VMXNET3 Virtual Network Adapter. The manipulation leads to out-of-bounds write.
This vulnerability is traded as CVE-2025-41236. The attack needs to be approached locally. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-56337 | Apache Tomcat up to 9.0.97/10.1.33/11.0.1 Incomplete Fix CVE-2024-50379 toctou (Nessus ID 213078 / WID-SEC-2024-3744)
2 months 1 week ago
A vulnerability, which was classified as critical, was found in Apache Tomcat up to 9.0.97/10.1.33/11.0.1. This affects an unknown part of the component Incomplete Fix CVE-2024-50379. The manipulation leads to time-of-check time-of-use.
This vulnerability is uniquely identified as CVE-2024-56337. The attack can only be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-50379 | Apache Tomcat up to 9.0.97/10.1.33/11.0.1 JSP Compilation toctou (Nessus ID 213078 / WID-SEC-2024-3722)
2 months 1 week ago
A vulnerability has been found in Apache Tomcat up to 9.0.97/10.1.33/11.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component JSP Compilation. The manipulation leads to time-of-check time-of-use.
This vulnerability is known as CVE-2024-50379. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CISA Releases Three Industrial Control Systems Advisories
2 months 1 week ago
CISA released three Industrial Control Systems (ICS) advisories on July 17, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.
- ICSA-25-198-01 Leviton AcquiSuite and Energy Monitoring Hub
- ICSMA-25-198-01 Panoramic Corporation Digital Imaging Software
- ICSA-24-191-05 Johnson Controls Inc. Software House C●CURE 9000 (Update B)
CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.
CISA
NIST’s Alex Maranghides Receives Service to America Medal
2 months 1 week ago
The award recognizes Maranghides for 25 years of work investigating devastating wildfires in the United States and creating actionable guidelines on how to save lives and property.
Sarah Henderson
Chainalysis: $2.17 billion in crypto stolen in first half of 2025, driven by North Korean hacks
2 months 1 week ago
The value of losses to crypto thefts has soared this year to more than $2 billion over the first six months, the blockchain analytics company Chainalysis found.
UNG0002 Actors Weaponize LNK Files via ClickFix Fake CAPTCHA Pages
2 months 1 week ago
Cybersecurity researchers at Seqrite Labs have identified a sophisticated espionage group designated as UNG0002 (Unknown Group 0002) that has been conducting persistent campaigns across multiple Asian jurisdictions since May 2024. The threat actors have demonstrated remarkable adaptability by integrating social engineering techniques with advanced malware deployment methods, specifically targeting organizations in China, Hong Kong, and […]
The post UNG0002 Actors Weaponize LNK Files via ClickFix Fake CAPTCHA Pages appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Aman Mishra
CVE-2024-26875 | Linux Kernel up to 6.8.1 lib/dump_stack.c pvr2_context_disconnect use after free (Nessus ID 242218)
2 months 1 week ago
A vulnerability classified as critical was found in Linux Kernel up to 6.8.1. Affected by this vulnerability is the function pvr2_context_disconnect in the library lib/dump_stack.c. The manipulation leads to use after free.
This vulnerability is known as CVE-2024-26875. The attack needs to be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-26586 | Linux Kernel up to 4.18/5.10.208/5.15.147/6.6.13/6.7.1 mlxsw spectrum_acl_tcam denial of service (Nessus ID 242218)
2 months 1 week ago
A vulnerability was found in Linux Kernel up to 4.18/5.10.208/5.15.147/6.6.13/6.7.1. It has been rated as problematic. Affected by this issue is the function spectrum_acl_tcam of the component mlxsw. The manipulation leads to denial of service.
This vulnerability is handled as CVE-2024-26586. The attack can only be initiated within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2023-53090 | Linux Kernel up to 6.2.7 kfd_wait_on_events initialization (Nessus ID 242218)
2 months 1 week ago
A vulnerability was found in Linux Kernel up to 6.2.7. It has been rated as problematic. This issue affects the function kfd_wait_on_events. The manipulation leads to improper initialization.
The identification of this vulnerability is CVE-2023-53090. The attack can only be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2023-53091 | Linux Kernel up to 5.15.103/6.1.20/6.2.7 ext4_get_journal null pointer dereference (Nessus ID 242218)
2 months 1 week ago
A vulnerability classified as critical was found in Linux Kernel up to 5.15.103/6.1.20/6.2.7. Affected by this vulnerability is the function ext4_get_journal. The manipulation leads to null pointer dereference.
This vulnerability is known as CVE-2023-53091. The attack needs to be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2023-52500 | Linux Kernel up to 5.10.197/5.15.133/6.1.55/6.5.5 pm80xx allocation of resources (Nessus ID 242218)
2 months 1 week ago
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.10.197/5.15.133/6.1.55/6.5.5. Affected by this issue is some unknown functionality of the component pm80xx. The manipulation leads to allocation of resources.
This vulnerability is handled as CVE-2023-52500. The attack can only be initiated within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2022-50134 | Linux Kernel up to 5.19.1 hfi1 setup_base_ctxt memory leak (Nessus ID 242218)
2 months 1 week ago
A vulnerability was found in Linux Kernel up to 5.19.1. It has been declared as critical. This vulnerability affects the function setup_base_ctxt of the component hfi1. The manipulation leads to memory leak.
This vulnerability was named CVE-2022-50134. The attack can only be initiated within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2022-49780 | Linux Kernel up to 4.19.266/5.4.224/5.10.155/5.15.79/6.0.9 scsi tcm_loop_setup_hba_bus allocation of resources (Nessus ID 242218)
2 months 1 week ago
A vulnerability was found in Linux Kernel up to 4.19.266/5.4.224/5.10.155/5.15.79/6.0.9. It has been declared as problematic. Affected by this vulnerability is the function tcm_loop_setup_hba_bus of the component scsi. The manipulation leads to allocation of resources.
This vulnerability is known as CVE-2022-49780. The attack needs to be done within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2022-49814 | Linux Kernel up to 6.0.9 kcm kcm_recvmsg race condition (Nessus ID 242218)
2 months 1 week ago
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.0.9. Affected by this issue is the function kcm_recvmsg of the component kcm. The manipulation leads to race condition.
This vulnerability is handled as CVE-2022-49814. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com