Aggregator

Submit #852865 / VDB-379792

Submit #852864 / VDB-379791

Submit #852863 / VDB-379790

A vulnerability was found in HCL Aftermarket EPC. It has been rated as problematic. Affected is an unknown function of the component Password Recovery. Performing a manipulation results in open redirect. This vulnerability is known as CVE-2024-23564. Remote exploitation of the attack is possible. No exploit is available.

Submit #852842 / VDB-379789

Submit #852825 / VDB-379788

A vulnerability was found in IKAS E-Commerce 03062026. It has been declared as problematic. This impacts an unknown function. Such manipulation leads to information disclosure. This vulnerability is traded as CVE-2026-7488. The attack may be launched remotely. There is no exploit available.

企业拥有模型权重，只得到一个会迅速过时的快照。更有价值的是掌握数据、强化学习和评测闭环，并判断哪些工作负载值得承担相应的复杂度成本。

blackeye也是一个频道列表实际上，真正除了15400+那个和蓝色底的有东西，其它都是乱七八糟的没用的玩意

Прежде чем позвать вас на собеседование, они уже могут знать о вас больше, чем друзья.

WAIC 2026 首日观察：20 个创新产品里的 AI

A Windows zero-day vulnerability, dubbed LegacyHive (MSNightmare), abuses the User Profile Service to enable local privilege escalation, tampering with administrator accounts, and admin-level code execution. LegacyHive targets the Windows User Profile Service (ProfSvc), which is responsible for loading and unloading user profiles and their registry hives during logon and logoff. The public proof‑of‑concept (PoC) from the […]

The post New Windows LegacyHive 0-Day Vulnerability Allows Hackers to Gain Admin Access appeared first on Cyber Security News.

A vulnerability was found in Proliz Software Ltd. OBS up to 3.5.x. It has been classified as problematic. This affects an unknown function of the component ACLs. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-7189. The attack may be initiated remotely. There is no available exploit.

Hackers are increasingly abusing trusted file formats and lightweight scripting environments to evade detection, with a newly observed campaign leveraging Lua-based loaders. Disguised as TrueType (.ttf) font files to deploy commodity malware, including Remcos RAT, Agent Tesla, XWorm, and Snake Keylogger variants. The campaign impersonates legitimate businesses and brands in email lures, often using payment-themed […]

The post Hackers Hide Lua Loaders in Fake TTF Files to Deploy Remcos, XWorm, and Agent Tesla appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in BURAK GD::SecurityImage up to 1.75 and classified as problematic. The impacted element is an unknown function of the component Captcha. The manipulation results in insufficiently random values. This vulnerability is reported as CVE-2026-13082. The attack can be launched remotely. No exploit exists.

A vulnerability has been found in GARU Dancer::Plugin::Auth::Google up to 0.07 and classified as critical. The affected element is an unknown function of the component User Agent. The manipulation leads to channel accessible by non-endpoint. This vulnerability is documented as CVE-2026-13410. The attack can be initiated remotely. There is not any exploit available.

Мобильные сети, платежи и транспорт Австралии рухнули из-за одной ошибки в настройках.

The White House launched Gold Eagle to coordinate vulnerability response in a new AI world, but multiple questions linger over how it's being implemented.

Yevhenii Khmara, a major general with deep experience in intelligence, counterterrorism and long-range strikes against Russia, is Ukraine's new acting defense minister.