Aggregator

SpyCloud推出AI驱动的调查工具，通过整合资深调查员的经验与技术，加速网络安全威胁的识别与应对。该工具利用历史数据和行为模式分析，帮助团队快速发现内部威胁及欺诈行为，并优化调查流程以提高效率。

A vulnerability classified as critical has been found in D-Link DIR-600 Rev B and DIR-300 Rev B. This affects an unknown part of the file command.php of the component Web Interface. The manipulation of the argument cmd leads to os command injection. This vulnerability is uniquely identified as CVE-2013-10069. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in ClanSphere 2011.3 and classified as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument cs_lang leads to path traversal. This vulnerability was named CVE-2012-10034. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in tnb-labs Ratpanel up to 2.5.5. Affected by this vulnerability is an unknown functionality. The manipulation leads to authentication bypass by primary weakness. This vulnerability is known as CVE-2025-53534. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Huawei HarmonyOS and EMUI. It has been rated as critical. This issue affects some unknown processing of the component HVB Module. The manipulation leads to buffer overflow. The identification of this vulnerability is CVE-2025-54632. It is possible to launch the attack on the physical device. There is no exploit available.

A vulnerability classified as critical has been found in Huawei HarmonyOS 5.0.1/5.1.0. Affected is an unknown function of the component DMA Module. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2025-54633. Local access is required to approach this attack. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Huawei HarmonyOS 5.0.1/5.1.0. Affected by this issue is some unknown functionality. The manipulation leads to handling of exceptional conditions. This vulnerability is handled as CVE-2025-54634. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability, which was classified as critical, was found in Huawei HarmonyOS 5.1.0. This affects an unknown part of the component Distributed Notification Service. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2025-54635. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS and EMUI. It has been classified as critical. Affected is an unknown function of the component Kernel Drop Detection Module. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2025-54636. Attacking locally is a requirement. There is no exploit available.

A vulnerability classified as critical was found in SSCMS 7.3.1. This vulnerability affects unknown code of the file /stl/actions/download?filePath. The manipulation leads to path traversal. This vulnerability was named CVE-2025-52237. The attack can only be initiated within the local network. There is no exploit available.

A vulnerability classified as critical was found in Ångström Distribution Project Narcissus. This vulnerability affects the function configure_image of the file backend.php. The manipulation of the argument release leads to os command injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability was named CVE-2012-10033. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in Glossword up to 1.8.12. Affected is an unknown function of the file gw_admin.php of the component Administrative Interface. The manipulation leads to unrestricted upload. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is traded as CVE-2013-10067. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Модель можно скачать бесплатно, запускать на ноутбуке и адаптировать под себя.

欢迎投递简历！

当前环境出现异常，请完成验证后继续访问。

Microsoft has unveiled an autonomous artificial intelligence system capable of analyzing and classifying software without any human intervention. The prototype, named Project Ire, is designed to detect malicious code at scale. According to Microsoft...

The post Project Ire: Microsoft’s AI System That Hunts Malware Without Humans appeared first on Penetration Testing Tools.

The top spot in HackerOne’s global ranking is no longer held by a human, but by a machine. Behind the alias “XBOW” is not a living researcher, but an AI-driven system that has already...

The post Human Hackers Dethroned: An AI Takes Top Spot on HackerOne appeared first on Penetration Testing Tools.

Cursor软件存在远程代码执行漏洞（CVE-2025-54135），因允许未授权文件写入工作区，攻击者可利用MCP协议重写配置文件并注入恶意命令。该漏洞影响版本为1.2.1及以下，CVSS评分为8.6。建议用户升级至1.3.9及以上版本或关闭“Auto-Run”功能以缓解风险。

A vulnerability was found in DevaslanPHP project-management 1.2.4. It has been classified as problematic. Affected is an unknown function. The manipulation of the argument Ticket Name leads to cross site scripting. This vulnerability is traded as CVE-2025-52203. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in CloudClassroom-PHP-Project 1.0/2.php. Affected by this issue is some unknown functionality of the file takeassessment2.php of the component POST Parameter Handler. The manipulation of the argument Q5 leads to sql injection. This vulnerability is handled as CVE-2025-50867. The attack may be launched remotely. There is no exploit available.