Aggregator

Новая версия банковского трояна следит за касаниями, подменяет окна приложений и умеет атаковать сотни банков и криптокошельков.

Currently trending CVE - Hype Score: 5 - A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without ...

Currently trending CVE - Hype Score: 1 - Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1.

Currently trending CVE - Hype Score: 7 - In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Currently trending CVE - Hype Score: 4 - A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.

Currently trending CVE - Hype Score: 4 - A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host ...

Currently trending CVE - Hype Score: 1 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered ...

Currently trending CVE - Hype Score: 1 - In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential management component, which ...

Currently trending CVE - Hype Score: 1 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered ...

Currently trending CVE - Hype Score: 26 - Use after free in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Currently trending CVE - Hype Score: 26 - Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

Name: PwnSec CTF 2026 [postponed] (an PwnSec CTF event.)
Date: Aug. 21, 2026, 2 p.m. — 22 Aug. 2026, 14:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.pwnsec.team/
Rating weight: 33.89
Event organizers: PwnSec

Name: $N1PH€RS 3.0 CTF (an $N1PH€RS CTF event.)
Date: Aug. 22, 2026, 3:15 a.m. — 22 Aug. 2026, 11:15 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://stjctf2026.tamilctf.com/
Rating weight: 0
Event organizers: Ex0rcists

8 000 добровольцев 15 лет фотографировали ручьи. Теперь их снимки разбирает Gemini.

Атом тория может занять несколько мест, но только в одном ядра резонируют одинаково.

В новых версиях операционной системы появилась статистика работы NPU.

Прокси-невидимка использует порт 443 и WebView — фильтры видят обычный заход на сайт.

A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud. [...]

原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅