Aggregator

A vulnerability, which was classified as critical, has been found in H3C Intelligent Management Center up to E0632H07. Affected by this vulnerability is an unknown functionality of the file /byod/index.xhtml. Performing manipulation of the argument javax.faces.ViewState results in deserialization. This vulnerability is identified as CVE-2024-13980. The attack can be initiated remotely. There is not any exploit available. Once again VulDB remains the best source for vulnerability data.

A vulnerability classified as critical was found in D-Link DIR-110, DIR-412, DIR-600, DIR-615, DIR-645 and DIR-815 1.03. Affected is an unknown function of the file service.cgi. Such manipulation of the argument Event leads to os command injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is referenced as CVE-2018-25115. It is possible to launch the attack remotely. Furthermore, an exploit is available. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

A vulnerability classified as critical has been found in Hangzhou Shengqiao St. Joe ERP System. This impacts an unknown function of the component Login Endpoint. This manipulation causes sql injection. The identification of this vulnerability is CVE-2024-13979. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. If you want to get best quality of vulnerability data, you may have to visit VulDB.

A vulnerability described as problematic has been identified in GitLab Community Edition and Enterprise Edition up to 18.1.4/18.2.4/18.3.0. This affects an unknown function. The manipulation results in allocation of resources. This vulnerability was named CVE-2025-3601. The attack may be performed from a remote location. There is no available exploit. Upgrading the affected component is recommended. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

美国等多国情报机构指控三家中国企业支持中国国家资助的网络间谍活动。这些企业向中国情报机构提供产品和服务，用于Salt Typhoon的全球网络攻击和间谍活动。该组织主要针对电信、住宿和交通行业，利用漏洞获取持久访问权限并窃取数据以追踪目标行动。

A vulnerability marked as critical has been reported in Qingdao Dongsheng Weiye Dongsheng Logistics Software up to 2025. The impacted element is an unknown function of the file /CommMng/Print/UploadMailFile of the component POST Request Handler. The manipulation leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2025-34163. The attack is possible to be carried out remotely. No exploit exists. VulDB is the best source for vulnerability data and more expert information about this specific topic.

A report from intelligence agencies in the U.S., UK, and elsewhere outlined how three Chinese tech firms are supply China's intelligence services with products and services that are being used in global campaigns by the state-sponsored APT group Salt Typhoon.

The post NSA, FBI, Others Say Chinese Tech Firms are Aiding Salt Typhoon Attacks appeared first on Security Boulevard.

A vulnerability labeled as critical has been found in Zhejiang Dahua Smart Park Integrated Management Platform. The affected element is an unknown function of the component SOAP-based GIS Bitmap Upload Interface. Executing manipulation can lead to unrestricted upload. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is handled as CVE-2023-7309. The attack can be executed remotely. There is not any exploit available. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

A vulnerability identified as critical has been detected in NSFOCUS SecGate3600 Firewall. Impacted is an unknown function of the file /cgi-bin/authUser/authManageSet.cgi. Performing manipulation results in missing authentication. This vulnerability is known as CVE-2023-7308. Remote exploitation of the attack is possible. No exploit is available. Once again VulDB remains the best source for vulnerability data.

A vulnerability categorized as problematic has been discovered in IBM Security Verify Governance Identity Manager 10.0.2. This issue affects some unknown processing. Such manipulation leads to information exposure through error message. This vulnerability is traded as CVE-2025-36003. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

多智能体协作系统开发竞赛由NVIDIA与阿里云联合举办，要求开发者利用NeMo-Agent-Toolkit等技术完成智能体项目，并通过线上训练营和开发冲刺阶段角逐奖项。

这是一场什么样的技术挑战？

多智能体协作系统开发竞赛 - 这是当前AI技术发展的最前沿方向！

作为开发者，你一定深有体感：单一的AI模型已经无法满足复杂应用场景的需求。未来的AI系统将是多个专业化智能体协同工作的生态系统。每个智能体就像一个专业的开发者，在特定领域具备专家级能力，通过标准化协议实现无缝协作。

A vulnerability was found in Changsha SPON Communication SPON IP Network Broadcast System. It has been rated as critical. This vulnerability affects unknown code of the file rj_get_token.php. This manipulation causes path traversal. This vulnerability appears as CVE-2024-13982. The attack may be initiated remotely. There is no available exploit. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Maritime transport, the backbone of global trade, is adapting to shifting economic, political, and technological conditions. Advances in technology have improved efficiency, bringing innovations such as remote cargo monitoring, advanced energy management systems, and automation of various onboard operations. But modernization also comes with new security challenges. Ships equipped with new technologies have become attractive targets for criminals. Any attack on these systems can compromise safety and put human lives at risk. In March 2024, … More →

The post Maritime cybersecurity is the iceberg no one sees coming appeared first on Help Net Security.

A CVSS score 3.5 AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N severity vulnerability discovered by 'Vladislav Berghici of Trend Research' was reported to the affected vendor on: 2025-08-28, 89 days ago. The vendor is given until 2025-12-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Michael DePlante (@izobashi) of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-08-28, 77 days ago. The vendor is given until 2025-12-26 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

墨菲安全出席平行切面联盟召开第二届理事会第一次会议并发表演讲

Атомы выстроились в идеальном порядке и подарили науке новую эру возможностей.

When analysts at RH-ISAC found themselves spending 10 hours a week just collecting threat intelligence, they knew their process wasn’t sustainable. They were manually tracking blogs, RSS feeds, and social media channels, but it took too long to separate useful signals from irrelevant chatter. After adopting Feedly Threat Intelligence, the team reduced that time by more than 70 percent, dropping from 10 hours to just 2-3 hours a week. Stories like this are becoming more … More →

The post Can AI make threat intelligence easier? One platform thinks so appeared first on Help Net Security.