Aggregator

Инвесторы сделали ставку на нового игрока в гонке ИИ-чипов.

Submit #922841 / VDB-403309

A vulnerability identified as critical has been detected in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file backend/cases/bulk_views.py of the component Bulk Case Update. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2026-90806. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

Submit #921799 / VDB-402181

Submit #921765 / VDB-402176

Submit #920489 / VDB-403308

A vulnerability categorized as critical has been discovered in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file doctorlogin.php. Executing a manipulation of the argument doc_mail/doc_pswd can lead to sql injection. This vulnerability is handled as CVE-2026-90805. The attack can be executed remotely. Additionally, an exploit exists. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was found in GNU Binutils 2.47. It has been rated as problematic. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. This vulnerability is known as CVE-2026-90804. Attacking locally is a requirement. Furthermore, an exploit is available. The project was informed of the problem early through a bug report but has not responded yet.

A vulnerability was found in GNU Binutils 2.47. It has been declared as problematic. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. This vulnerability is traded as CVE-2026-90803. An attack has to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in GNU Binutils 2.47. It has been classified as problematic. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2026-90802. The attack requires local access. In addition, an exploit is available. The project was informed of the problem early through a bug report but has not responded yet.

A vulnerability was found in GNU Binutils 2.47 and classified as problematic. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. This vulnerability is reported as CVE-2026-90801. The attack requires a local approach. Moreover, an exploit is present. The project was informed of the problem early through a bug report but has not responded yet.

Submit #920373 / VDB-403307

Submit #920281 / VDB-403306

Submit #920280 / VDB-403305

Submit #920277 / VDB-403304

Submit #920276 / VDB-403303

150亿token，折腾了快一个月，在 AI 的帮助下，我给家里的小米平板 6 Pro 移植了原生 Linux，跑上了 Ubuntu 桌面。

Впервые он смог смоделировать рождение тяжёлой частицы.

Dell Technologies released a security advisory about multiple vulnerabilities affecting Dell ObjectScale and Elastic Cloud Storage (ECS) deployments. Including a critical remote code execution flaw that could let an unauthenticated attacker compromise vulnerable systems. The advisory, tracked as DSA-2026-393, was published on September 10, 2026. The most severe issue is CVE-2026-70416, a critical untrusted-data deserialization […]

The post Critical Dell ObjectScale Vulnerabilities Allows Malicious Users to Compromise the Affected system appeared first on Cyber Security News.

В эксперименте сетевой чип отправлял служебные пакеты напрямую через Wi-Fi, пока VPN продолжал работать.