Aggregator

高通与字节跳动达成人工智能芯片交易据知情人士透露，高通公司已与TikTok母公司字节跳动达成协议，为人工智能数据中心供应芯片，这标志着这家试图从智能手机处理器扩展到人工智能基础设施的公司取得了一场关键

2026年05月26日（現地時間）、米国CISAがCISA ICS Advisory / ICS Medical Advisoryを公表しました。

OpenCATS 0.9.7.4 - SQL Injection

Realtek rtl819x - Local Privilege

MeiG Smart FORGE_SLT711 - OS Command Injection

scramble - Remote Code Execution

EspoCRM 9.3.3 - SSRF

Casdoor 3.54.1 - Arbitrary File Write via Path Traversal

Linux Kernel - Local Privilege Escalation

Casdoorには、パストラバーサルの脆弱性が存在します。

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

构建机场全域纵深防护体系。

A threat actor using the alias Sorb claims to be selling a database allegedly belonging to Tripocity, a UK B2B transport-management company specializing in coach and minibus travel across the UK and Europe.

Мобам пришлось убивать друг друга на благо науки.

A vulnerability was found in XenSource Xen. It has been declared as problematic. Affected is an unknown function. Executing a manipulation can lead to information disclosure (Kernel Memory). This vulnerability is tracked as CVE-2015-8553. The attack is restricted to local execution. No exploit exists.

A vulnerability, which was classified as critical, has been found in HylaFAX Enterprise Web Interface and AvantFAX. Affected is an unknown function. The manipulation leads to code injection. This vulnerability is referenced as CVE-2025-1782. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in Apple iOS and iPadOS. Affected by this vulnerability is an unknown functionality of the component App. The manipulation results in information disclosure. This vulnerability is cataloged as CVE-2025-43357. The attack must be initiated from a local position. There is no exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as problematic, has been found in Apple macOS. Affected by this issue is some unknown functionality of the component App. This manipulation causes information disclosure. This vulnerability is registered as CVE-2025-43357. The attack needs to be launched locally. No exploit is available. It is advisable to upgrade the affected component.