Aggregator

CNCERT：关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

互联网安全内参

3 weeks 4 days ago

CNCERT：关于家用路由器DNS被恶意篡改导致异常跳转风险的提示

不安全

3 weeks 4 days ago

环境异常当前环境异常，完成验证后即可继续访问。去验证

供应商支付超1.2亿元赎金，避免被盗的客户数据公开泄露

不安全

3 weeks 4 days ago

环境异常当前环境异常，完成验证后即可继续访问。去验证

Four Reasons Why Strategic QA Is a Fintech Superpower

不安全

3 weeks 4 days ago

New StorybyLena YakimovabyLena Yakimova@yakimovaLena Yakimova is the Head of department at a1qa.com

Currently trending CVE - Hype Score: 1 - llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation when a tensor's buffer field is 0. An unauthenticated attacker can read and write arbitrary process memory via crafted ...

CVE-2024-13745

CVE Trends

3 weeks 4 days ago

Currently trending CVE - Hype Score: 1

CVE-2026-46364

CVE Trends

3 weeks 4 days ago

Currently trending CVE - Hype Score: 2 - phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and BuiltinCaptcha::saveCaptcha() methods that interpolate unsanitized User-Agent headers into DELETE and INSERT queries. Unauthenticated attackers can exploit the ...

CVE-2026-39987

CVE Trends

3 weeks 4 days ago

Currently trending CVE - Hype Score: 2 - marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. ...

CVE-2026-40933

CVE Trends

3 weeks 4 days ago

Currently trending CVE - Hype Score: 2 - Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, due to unsafe serialization of stdio commands in the MCP adapter, an authenticated attacker can add an MCP stdio server with an arbitrary command, achieving command ...