Aggregator

A vulnerability was found in Samsung Smart Phone and classified as critical. Affected is an unknown function of the component ContactListUtils. Executing a manipulation can lead to improper access controls. This vulnerability is registered as CVE-2022-39895. The attack needs to be launched locally. No exploit is available. It is suggested to upgrade the affected component.

2026年5月14日，微软公开披露CVE-2026-42897，一处位于Exchange Server Outlook Web Access的反射型跨站脚本漏洞。第二天，CISA 就将该编号列入KEV目录，修复截止日期是5月29日。从这个节奏可以看出：这个零日不是"理论上能打"，而是已经在野外被实际利用。

小暑 | 倏忽暑风至 网安境自安

A vulnerability has been found in Directory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file search-dirctory.php. The manipulation of the argument searchdata leads to sql injection. This vulnerability is uniquely identified as CVE-2022-31382. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Directory Management System 1.0 and classified as critical. This affects an unknown part of the file view-directory.php. The manipulation of the argument editid results in sql injection. This vulnerability was named CVE-2022-31383. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Directory Management System 1.0. It has been classified as critical. This vulnerability affects unknown code of the file add-directory.php. This manipulation of the argument fullname causes sql injection. The identification of this vulnerability is CVE-2022-31384. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as critical has been found in Tenda ONT GPON AC1200 1.0.1. This vulnerability affects unknown code of the component Ping Handler. The manipulation leads to command injection. This vulnerability is documented as CVE-2022-30023. The attack requires being on the local network. There is not any exploit available.

A vulnerability was found in IObit IOTransfer 4.3.1.1561. It has been rated as critical. This vulnerability affects unknown code of the component Airserv. Performing a manipulation results in missing authentication. This vulnerability was named CVE-2022-24562. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability marked as problematic has been reported in ASG Zena Cross Platform Server Enterprise Edition 4.2.1. Impacted is an unknown function of the component Cookie Handler. This manipulation causes missing encryption of sensitive data. The identification of this vulnerability is CVE-2021-45025. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in ASG Zena Cross Platform Server Enterprise Edition 4.2.1. This affects an unknown function. Executing a manipulation can lead to xml external entity reference. This vulnerability is tracked as CVE-2021-45024. The attack is only possible within the local network. No exploit exists.

A vulnerability, which was classified as problematic, was found in ASG Zena Cross Platform Server Enterprise Edition 4.2.1. Affected is an unknown function. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2021-45026. The attack may be launched remotely. There is no exploit available.

A vulnerability identified as problematic has been detected in Ruckus Wireless ZoneDirector 9.8.3.0. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2020-21161. The attack can be initiated remotely. There is not any exploit available.

A vulnerability classified as critical has been found in Tenda AC23 16.03.07.44. The impacted element is the function formWifiBasicSet. The manipulation of the argument security_5g leads to stack-based buffer overflow. This vulnerability is documented as CVE-2022-32384. The attack requires being on the local network. There is not any exploit available.

A vulnerability was found in SourceCodester Zoo Management System 1.0. It has been rated as problematic. This impacts an unknown function of the component Add Classification. This manipulation causes cross site scripting. This vulnerability is registered as CVE-2022-33075. Remote exploitation of the attack is possible. No exploit is available.

先知安全沙龙第14场 - AI Agent 的信任边界：从中转 API 到 Agent Tool Call 的供应链劫持

一场钓鱼活动冒充超过 30 个知名品牌，包括 Adobe、Netflix、Coca-Cola 和 OpenAI，通过虚假的求职面试来窃取营销专业人士的 Google 账户凭证。该操作滥用了合法的云端 PeopleForce 人力资源平台以及一个与 Salesforce Marketing Cloud 服务关联的域名，然后将收件人重定向到一个恶意登陆页面。为进一步建立信任并提高成功率，威胁行为者使用...

威胁行为者正在滥用 Microsoft Teams 语音通话，冒充企业 IT 支持人员，诱骗员工安装 EtherRAT 恶意软件，从而让攻击者获得对企业网络的初始访问权限。据 Palo Alto Networks 的 Unit 42 报告，该活动结合了钓鱼邮件、Microsoft Teams 语音通话、合法的远程管理工具以及一个基于 Node.js 的恶意软件加载器，以入侵受害者的计算机。根据 U...

根据漏洞情报公司 KEVIntel 的消息，攻击者现在正在利用一个最高严重级别的 Adobe ColdFusion 漏洞，编号为 CVE-2026-48282。ColdFusion 是一个商业 Web 应用开发平台，旨在帮助构建和部署企业级网站。CVE-2026-48282 安全漏洞影响 ColdFusion 版本 2025.9、2023.20 及更早版本，攻击者可在无需权限的情况下利用该漏洞在未...

研究人员识别出他们认为是首个有记录的案例——JadePuffer，一次完全由大语言模型智能体执行的勒索软件操作。根据云安全公司 Sysdig 的说法，JadePuffer 使用自主 AI 智能体对目标进行侦察、窃取凭证、横向移动、建立持久性、提升权限以及加密数据。研究人员表示，该 AI 智能体在入侵过程中会适应失败情况，就像人类操作员处理障碍一样。Sysdig 表示："该操...