Aggregator

本文内容摘自为安全牛最新发布的《智能化安全运营中心应用指南（2025年）》研究报告 当前，企业IT环境极其复杂 […]

微信首个 AI 助手上线：可与「元宝」在聊天框对话 抖音启动「外贸优品专项扶持计划」 谷歌发新工具，专治后台「捣乱」安卓应用

ABB Cylon Aspect 3.08.02 (deployStart.php) - Unauthenticated Command Execution

ABB Cylon Aspect 3.08.02 (ethernetUpdate.php) - Authenticated Path Traversal

Angular-Base64-Upload Library 0.1.21 - Unauthenticated Remote Code Execution (RCE)

Usermin 2.100 - Username Enumeration

Blood Bank & Donor Management System 2.4 - CSRF Improper Input Validation

compop.ca 3.5.3 - Arbitrary code Execution

AnyDesk 9.0.1 - Unquoted Service Path

How modern secrets management shapes culture, reduces friction, and clears the way for developer innovation

The post From maintenance to innovation: The cultural impact of managed secrets appeared first on Security Boulevard.

TP-Link VN020 F3v(T) TT_V6.2.1021 - Buffer Overflow Memory Corruption

TP-Link VN020 F3v(T) TT_V6.2.1021 - Denial Of Service (DOS)

数据的存储能力、管理效率、成本控制、数据安全等方面均获得显著改善。

Mend.io continues to deliver uninterrupted, multi-source vulnerability protection.

The post MITRE CVE Program Uncertainty: Mend.io’s commitment to uninterrupted vulnerability protection appeared first on Security Boulevard.

A vulnerability was found in Arctera Veritas Data Insight up to 7.1.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cleartext transmission of sensitive information. The identification of this vulnerability is CVE-2025-43704. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Google ChromeOS 124.0.6367.34 on Chromebooks and classified as problematic. This vulnerability affects unknown code of the component ComponentInstaller. The manipulation leads to state issue. This vulnerability was named CVE-2025-1704. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Google ChromeOS 129.0.6668.36. This affects an unknown part of the component DNS Query Handler. The manipulation leads to missing encryption of sensitive data. This vulnerability is uniquely identified as CVE-2025-1566. It is possible to initiate the attack remotely. There is no exploit available.