Aggregator

文章介绍了HIBP新增的演示页面和YouTube频道，提供教学视频以简化API使用和基础操作教程，并展示域名监控功能的广泛应用。

A vulnerability, which was classified as problematic, was found in zephyrproject-rtos Zephyr up to 4.1.0. Affected by this vulnerability is an unknown functionality of the component BLE Connection Response Handler. The manipulation results in security check for standard. This vulnerability is cataloged as CVE-2025-10457. The attack must originate from the local network. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in SMSEagle up to 6.10. Affected is an unknown function of the component Phone Number Handler. The manipulation leads to cross site scripting. This vulnerability is listed as CVE-2025-59715. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in Snipe-IT up to 8.1.17. This impacts an unknown function. Executing manipulation can lead to cross site scripting. This vulnerability is tracked as CVE-2025-59712. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Microsoft Windows up to Server 2025. This affects an unknown function of the component Bluetooth Service. Performing manipulation results in race condition. This vulnerability is identified as CVE-2025-59220. The attack is only possible with local access. There is not any exploit available. Applying a patch is the recommended action to fix this issue.

A vulnerability described as critical has been identified in Supermicro MBD-X13SEM-F 01.03.47. The impacted element is an unknown function of the component BMC Firmware Validation. Such manipulation leads to improper verification of cryptographic signature. This vulnerability is referenced as CVE-2025-6198. It is possible to launch the attack remotely. No exploit is available.

A vulnerability marked as critical has been reported in Supermicro MBD-X12STW 01.06.17. The affected element is an unknown function of the component BMC Firmware Validation. This manipulation causes improper verification of cryptographic signature. The identification of this vulnerability is CVE-2025-7937. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability labeled as problematic has been found in Internet2 Grouper up to 5.20.4. Impacted is an unknown function of the component Loader Job Handler. The manipulation results in incorrect authorization. This vulnerability was named CVE-2025-59714. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in Snipe-IT up to 8.1.17. This issue affects some unknown processing. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2025-59713. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Oracle OpenGrok 1.14.1. This vulnerability affects unknown code. Executing manipulation of the argument revision can lead to cross site scripting. This vulnerability is handled as CVE-2025-30755. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Kovah LinkAce up to 2.3.0. It has been rated as problematic. This affects an unknown part of the file /system/audit. Performing manipulation of the argument Username results in cross site scripting. This vulnerability is known as CVE-2025-59424. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability was found in Wind River Systems VxWorks 7 up to 25.02. It has been declared as critical. Affected by this issue is some unknown functionality. Such manipulation leads to memory corruption. This vulnerability is traded as CVE-2025-26503. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

三星在美国上市了九款 Family Hub 冰箱，建议零售价从 1,800 美元到 3,500 美元。这些冰箱配备了 21.5 英寸或 32 英寸的显示屏，用户可选择显示各种内容。本周三星向 Family Hub 冰箱推送了软件更新，开始用这些显示屏展示广告。三星在一份声明中表示，它正在美国市场开展一项试点，在部分三星 Family Hub 冰箱型号上投放促销和精选广告。三星表示如果客户不喜欢某个广告，他们可以移除，之后该广告就不会再次展示。如果用户配置显示屏的 Cover Screen 展示 Art Mode 或相册，广告也不会展示。今年早些时候三星曾宣称它没有在冰箱显示屏上展示广告的计划，但显然食言了。

A vulnerability was found in Kyocera Command Center RX EXOSYS M5521cdn. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component User Interface. This manipulation causes information disclosure. This vulnerability appears as CVE-2023-49367. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Cognex In-Sight 2000, In-Sight 7000, In-Sight 8000, In-Sight 9000 and In-Sight Explorer up to 6.5.1 on Windows and classified as critical. Affected is an unknown function. The manipulation results in incorrect default permissions. This vulnerability is reported as CVE-2025-53947. The attack requires a local approach. No exploit exists.

A vulnerability has been found in DigitalOcean do-markdownit up to 1.16.1 and classified as problematic. This impacts an unknown function of the component fence_environment Plugin. The manipulation leads to type confusion. This vulnerability is documented as CVE-2025-59717. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in codename065 Download Manager Plugin up to 3.3.23 on WordPress. This affects an unknown function. Executing manipulation of the argument user_ids can lead to cross site scripting. This vulnerability is registered as CVE-2025-10146. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Cognex In-Sight 2000, In-Sight 7000, In-Sight 8000, In-Sight 9000 and In-Sight Explorer up to 6.5.1. The impacted element is an unknown function of the component Network Traffic Handler. Performing manipulation results in use of hard-coded password. This vulnerability is cataloged as CVE-2025-54754. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Cognex In-Sight 2000, In-Sight 7000, In-Sight 8000, In-Sight 9000 and In-Sight Explorer up to 6.5.1. The affected element is an unknown function of the component Firmware Upgrade Handler. Such manipulation leads to cleartext transmission of sensitive information. This vulnerability is listed as CVE-2025-47698. The attack may be performed from remote. There is no available exploit.

A vulnerability classified as critical has been found in Fortra GoAnywhere MFT up to 7.8.3. Impacted is an unknown function of the component License Servlet. This manipulation causes command injection. This vulnerability is tracked as CVE-2025-10035. The attack is possible to be carried out remotely. No exploit exists.