Aggregator

A vulnerability described as problematic has been identified in Google Android. Affected by this issue is some unknown functionality. Executing manipulation can lead to cleartext transmission of sensitive information. This vulnerability is tracked as CVE-2023-21220. The attack can be launched remotely. No exploit exists. Applying a patch is advised to resolve this issue.

Arkime is an open-source system for large-scale network analysis and packet capture. It works with your existing security tools to store and index network traffic in standard PCAP format, making it easy to search and access. The solution includes a simple web interface for browsing, searching, and exporting PCAP files. Arkime also provides APIs for downloading PCAP data and session data in JSON format. Because Arkime uses standard PCAP files, you can analyze the data … More →

The post Arkime: Open-source network analysis and packet capture system appeared first on Help Net Security.

A vulnerability categorized as problematic has been discovered in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation results in guessable captcha. This vulnerability is identified as CVE-2025-10423. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability identified as critical has been detected in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/faculty_controller.php. This manipulation of the argument new_image causes unrestricted upload. This vulnerability is tracked as CVE-2025-10424. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability labeled as critical has been found in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/student_controller.php. Such manipulation of the argument new_image leads to unrestricted upload. This vulnerability is listed as CVE-2025-10425. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability marked as critical has been reported in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. This vulnerability is cataloged as CVE-2025-10426. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability described as critical has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument website_image can lead to unrestricted upload. This vulnerability is registered as CVE-2025-10427. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability labeled as critical has been found in Digiever DS-1200, DS-2100 Pro, DS-2100 Pro+, DS-2100 UHD, DS-2200 UHD, DS-2200 UHD+, DS-4200 Pro, DS-4200 Pro+, DS-4200 UHD, DS-4200 UHD+, DS-4100-RM, DS-4200-RM Pro+, DS-4200-RM UHD, DS-8x00-RM Pro+, DS-8x00-SRM Pro+, DS-8x00-RM UHD, DS-16x00-RM Pro+ and DS-16x00-RM UHD. This affects an unknown function. The manipulation results in os command injection. This vulnerability is known as CVE-2025-10265. It is possible to launch the attack remotely. No exploit is available.

OpenAI调整GPT-5系列模型API速率，各层级TPM翻倍。例如Tier 1由30K升至500K TPM。GPT-5-mini Tier 1也由200K升至500K TPM。开发者可登录平台查看最新层级和速率限制。

A vulnerability identified as problematic has been detected in Express XSS Sanitizer up to 2.0.0 on Node.js. Affected by this issue is some unknown functionality in the library lib/sanitize.js of the component JSON Request Body Handler. The manipulation leads to uncontrolled recursion. This vulnerability is referenced as CVE-2025-59364. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as problematic has been discovered in libexpat up to 2.7.1. Affected by this vulnerability is an unknown functionality. Executing manipulation can lead to allocation of resources. The identification of this vulnerability is CVE-2025-59375. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Gotac Statistical Database System up to 1.0.0. It has been rated as critical. Affected is an unknown function. Performing manipulation results in missing authentication. This vulnerability was named CVE-2025-10452. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in huggingface transformers up to 4.52.x. It has been declared as problematic. This impacts the function normalize_numbers. Such manipulation leads to inefficient regular expression complexity. This vulnerability is uniquely identified as CVE-2025-6051. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

UK ICO reports students caused over half of school data breaches, showing kids are shaping cybersecurity in unexpected ways. The UK Information Commissioner’s Office (ICO), students were responsible for most of the data breaches suffered by the schools in the country. The U.K.’s independent regulator for data protection and information rights also reported that nearly […]

英国 ICO 报告称学生引发超半数学校数据泄露事件，部分青少年因好奇或报复等原因参与网络犯罪。

Panama’s Ministry of Economy and Finance disclosed a security breach impacting a computer in its infrastructure. Panama’s Ministry of Economy and Finance (MEF) announced that threat actors likely compromised one of its computers. The Ministry immediately activated its security protocols to contain the threat. Panama’s Ministry pointed out that critical systems vital to operations remain […]

巴拿马经济和财政部遭遇网络攻击，黑客组织INC声称窃取1.5TB数据，包括财务文件和内部邮件。尽管关键系统未受影响，但该部门已启动安全措施应对威胁。