Aggregator

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag leads to path traversal. This vulnerability is uniquely identified as CVE-2025-6853. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Submit #602529 / VDB-314329

Submit #602528 / VDB-314328

Submit #601162 / VDB-314327

Submit #601161 / VDB-314326

Submit #601155 / VDB-314325

A vulnerability was found in Linux Kernel up to 6.15.3. It has been rated as problematic. Affected by this issue is the function mii_nway_restart of the component ch9200. The manipulation leads to unchecked return value. This vulnerability is handled as CVE-2025-38086. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.15.3. It has been declared as critical. Affected by this vulnerability is the function huge_pmd_unshare of the component hugetlb. The manipulation leads to memory corruption. This vulnerability is known as CVE-2025-38085. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.15.3. It has been classified as critical. Affected is the function __split_vma of the component HugeTLB Page Handler. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2025-38084. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

该框架凸显了专业区块链安全服务的不可或缺性。

ISC.AI 2025创新独角兽沙盒大赛开启，招募安全与AI全域创新力量

看雪论坛作者ID：mb_ttrwvnrc

A sophisticated social engineering campaign has surfaced on TikTok, leveraging the platform’s massive user base and algorithmic reach to distribute information-stealing malware, specifically Vidar and StealC. Identified by Trend Research, this attack uses potentially AI-generated videos to deceive users into executing malicious PowerShell commands under the guise of activating pirated software like Windows OS, Microsoft […]

The post Beware of Trending TikTok Videos Promoting Pirated Apps That Deliver Stealer Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Техас нашёл способ узнать о гражданах чуть больше, чем ваш поисковик.

The U.S. Federal Bureau of Investigation (FBI) has revealed that it has observed the notorious cybercrime group Scattered Spider broadening its targeting footprint to strike the airline sector. To that end, the agency said it's actively working with aviation and industry partners to combat the activity and help victims. "These actors rely on social engineering techniques, often impersonating

Netskope Threat Labs has uncovered a malicious campaign exploiting fake software installers, including those mimicking popular tools like DeepSeek, Sogou, and WPS Office, to deliver dangerous malware payloads such as the Sainbox RAT (a variant of Gh0stRAT) and the Hidden rootkit. This operation, primarily targeting Chinese-speaking users through phishing websites and counterfeit MSI installers, showcases […]

The post Weaponized DeepSeek Installers Deploy Sainbox RAT and Hidden Rootkit appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Код из Rust может вскоре заменить большую часть существующих реализаций.

开篇提醒：如果您不知道AiPy，不知道Python-Use请先点击阅读下面两篇文章：【Agents/MCP可能

Cybercriminals use malicious AI models to write malware and phishing scams Cisco Talos warns of rising threats from uncensored and custom AI tools.