Aggregator

Currently trending CVE - Hype Score: 1 - An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUI_v1.0.1802.10.08_P4 and LT21B devices through M7628xUSAxUIv2_v1.0.1481.15.02_P0. A unauthenticated remote attacker with network access can exploit a command injection vulnerability. The ...

Currently trending CVE - Hype Score: 1 - Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

A vulnerability classified as problematic has been found in Huawei HarmonyOS and EMUI. This affects an unknown part of the component Window Module. The manipulation leads to business logic errors. This vulnerability is uniquely identified as CVE-2024-58043. Attacking locally is a requirement. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS 5.0.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component HDC Module. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2024-58050. Local access is required to approach this attack. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS 5.0.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Media Library Module. The manipulation leads to information disclosure. This vulnerability is known as CVE-2024-58049. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS 5.0.0. It has been classified as problematic. Affected is an unknown function of the component Multi-Thread Handler. The manipulation leads to race condition. This vulnerability is traded as CVE-2024-58048. The attack needs to be approached locally. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS 5.0.0 and classified as problematic. This issue affects some unknown processing. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2024-58047. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability has been found in NAKIVO Backup & Replication Director and classified as problematic. This vulnerability affects unknown code of the file /c/router. The manipulation leads to absolute path traversal. This vulnerability was named CVE-2024-48248. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

黑客19分钟内即可窃取云端AI模型访问权限。利用泄露密钥，攻击者迅速劫持企业AI系统，牟取暴利，威胁数据安全与成本控制。

A critical zero-day vulnerability in BigAntSoft’s BigAnt Server (CVE-2025-0364) allows unauthenticated attackers to execute arbitrary code on affected systems through a chain of SaaS registration abuses and PHP file uploads.  The flaw, discovered by VulnCheck researchers during an analysis of a misrated CVSS score for CVE-2024-54761, impacts all versions ≤5.6.06 of the Windows-based enterprise chat […]

The post BigAnt Server 0-day Vulnerability Let Attackers Execute Malicious Code Via File Uploads appeared first on Cyber Security News.

根据国家信息安全漏洞库（CNNVD）统计，2025年2月采集安全漏洞共3638个。

根据国家信息安全漏洞库（CNNVD）统计，2025年2月采集安全漏洞共3638个。

A critical vulnerability in BigAntSoft’s enterprise chat server software has exposed ~50 internet-facing systems to unauthenticated remote code execution attacks. Designated CVE-2025-0364, this exploit chain enables attackers to bypass authentication protocols, create administrative accounts, and execute malicious PHP code on vulnerable servers running BigAnt Server v5.6.06 and earlier. CVE-2025-0364: Authentication Bypass to PHP Code Execution The […]

The post BigAnt Server 0-Day Vulnerability Lets Attackers Run Malicious Code Remotely appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

漏洞预警 | OLLAMA 存在未授权访问漏洞（CNVD-2025-04094）

漏洞预警 | OLLAMA 存在未授权访问漏洞（CNVD-2025-04094）

漏洞预警 | OLLAMA 存在未授权访问漏洞（CNVD-2025-04094）

Камера на метаповерхностях ускоряет машинное зрение в 200 раз.