Aggregator

A vulnerability was found in Samsung Smart Phone. It has been rated as critical. This issue affects the function setPartnerTAInfo of the component mPOS TUI Trustlet. This manipulation causes memory corruption. This vulnerability is tracked as CVE-2023-21498. The attack is restricted to local execution. No exploit exists. Upgrading the affected component is advised.

A vulnerability was found in Paraşüt up to 20250204. It has been classified as problematic. Impacted is an unknown function. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2025-0420. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in JetBrains TeamCity on Windows and classified as problematic. This issue affects some unknown processing of the component Git URL Validation Handler. The manipulation results in permissive list of allowed inputs. This vulnerability is identified as CVE-2025-59457. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in JetBrains TeamCity and classified as problematic. This vulnerability affects unknown code of the component Project Archive Upload Handler. The manipulation leads to relative path traversal. This vulnerability is referenced as CVE-2025-59456. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in JetBrains TeamCity. This affects an unknown part of the component Project Handler. Executing manipulation can lead to race condition. The identification of this vulnerability is CVE-2025-59455. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in mmaitre314 picklescan up to 0.0.30. Affected by this issue is some unknown functionality of the component File Extension Handler. Performing manipulation results in improper input validation. This vulnerability was named CVE-2025-10155. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as critical was found in JetBrains Junie. Affected by this vulnerability is an unknown functionality. Such manipulation leads to command injection. This vulnerability is uniquely identified as CVE-2025-59458. The attack can be launched remotely. No exploit exists. Upgrading the affected component is advised.

MuHackademy 2025 于 11 月 20 日至 21 日在意大利 Brescia 举行，分为两晚：第一晚探讨黑客空间运作与开源游戏设计；第二晚聚焦人工智能与 NVIDIA 硬件安全。活动提供在线直播及回放资源。

New IO research reveals a surge in AI attacks attempting to corrupt underlying training data

美国航空业通过可搜索数据库向政府出售50亿乘客记录；涉及姓名、行程、财务细节；由ARC运营；始于911事件后；数据来自旅行社预订。

Раскрыта новая схема атаки через ИИ-ассистентов.

所谓必修漏洞，就是运维人员必须修复、不可拖延、影响范围较广的漏洞，被黑客利用并发生入侵事件后，会造成十分严重

当前环境异常，请完成验证后继续访问。

文章介绍了Cisco Talos IR Retainer服务，该服务为组织提供24/7应急支持、全球威胁情报和定制准备计划等，帮助提升网络安全韧性，减少风险和成本，并保护声誉。该服务通过主动威胁狩猎、持续改进策略和跨部门协作，确保组织在面对网络攻击时能够快速响应和恢复。

当前环境出现异常，需完成验证后方可继续访问。

文章介绍了利用QR码进行恶意攻击的案例，揭示了部分QR码生成服务隐藏的风险。通过实际案例说明了攻击者如何通过修改QR码链接实现勒索目的，并提出了防范建议，强调选择可信服务和加强安全检查的重要性。

De genietroepen van de Multinational Battlegroup in Litouwen trainen onder meer het bouwen van loopgraven. Dat gebeurt onder de noemer Engineer Thunder 2025 in Pabradė. Deze grootschalige oefening staat onder leiding van de Litouwse genie. Een overzicht van Defensieoperaties in de week van 10 tot en met 16 september 2025.

A global ad fraud and click fraud operation, dubbed SlopAds, comprising 224 Android apps that collectively amassed more than 38 million downloads across 228 countries and territories. Under the guise of AI-themed utilities, these apps employ advanced obfuscation techniques—such as steganography and hidden WebViews—to deliver a fraud payload that generates billions of ad impressions and […]

The post Google Play Flooded With 224 Malicious Apps, 38 Million Downloads Deliver Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Linux内核KSMBD子系统漏洞可致服务器资源耗尽。