Aggregator

Обновление больше похоже на подготовку к будущему, чем на шаг вперёд.

Threat actors have been using multiple websites promoted through Google ads to distribute a convincing PDF editing app that delivers an info-stealing malware called TamperedChef. [...]

A vulnerability, which was classified as problematic, has been found in Apple tvOS. Affected by this vulnerability is an unknown functionality. This manipulation causes race condition. The identification of this vulnerability is CVE-2024-54510. The attack can only be executed locally. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Apple macOS. Affected by this issue is some unknown functionality. Such manipulation leads to race condition. This vulnerability is referenced as CVE-2024-54510. The attack can only be performed from a local environment. No exploit is available. You should upgrade the affected component.

A vulnerability described as critical has been identified in Apple macOS. Impacted is an unknown function of the component Web Handler. Such manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2024-54508. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in Apple watchOS. The affected element is an unknown function of the component Web Handler. Performing manipulation results in memory corruption. This vulnerability was named CVE-2024-54508. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Apple iOS and iPadOS. The impacted element is an unknown function of the component Web Handler. Executing manipulation can lead to memory corruption. The identification of this vulnerability is CVE-2024-54508. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Apple Safari. This affects an unknown function of the component Web Handler. The manipulation leads to memory corruption. This vulnerability is referenced as CVE-2024-54508. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in Apple iOS and iPadOS up to 15.1. Impacted is an unknown function of the component Kernel Memory Handler. Executing manipulation can lead to type confusion. This vulnerability is registered as CVE-2024-54507. The attack needs to be launched locally. No exploit is available. Upgrading the affected component is advised.

A vulnerability labeled as critical has been found in Apple tvOS. This vulnerability affects unknown code of the component Web Handler. The manipulation results in memory corruption. This vulnerability is known as CVE-2024-54508. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability marked as critical has been reported in Apple visionOS. This issue affects some unknown processing of the component Web Handler. This manipulation causes memory corruption. This vulnerability is handled as CVE-2024-54508. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability classified as problematic has been found in Apple macOS up to 15.1. This issue affects some unknown processing of the component Kernel Memory Handler. Performing manipulation results in type confusion. This vulnerability is cataloged as CVE-2024-54507. The attack must be initiated from a local position. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability identified as critical has been detected in Apple Safari. This affects an unknown part of the component Web Handler. The manipulation leads to type confusion. This vulnerability is traded as CVE-2024-54505. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Apple macOS up to 15.1. The impacted element is an unknown function of the component DCP Firmware Handler. The manipulation results in out-of-bounds write. This vulnerability is identified as CVE-2024-54506. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability categorized as critical has been discovered in Apple iOS and iPadOS. Affected by this issue is some unknown functionality of the component Web Handler. Executing manipulation can lead to type confusion. This vulnerability appears as CVE-2024-54505. The attack may be performed from a remote location. There is no available exploit. It is advisable to upgrade the affected component.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

Vivaldi CEO 谭咏文(Jon von Tetzchner)再次强调了不会在浏览器中集成生成式 AI 的立场。他的理由是相比生成式 AI，人类的 Web 更具有多元化。他说，浏览器嵌入生成式 AI 会让 Web 丧失人性，导致内容发行商的流量减少，且其主要用途是收集用户数据。他说，每一个初创公司都在搞 AI，每一家公司都试图在其产品和服务中集成 AI，但这些公司都没有关注用户的真正需求。他说，Vivaldi 选择站在人类这边，而不是选择站在炒作 AI 那边，不会将探索的乐趣变成不活跃的旁观。如果没有探索，Web 会索然无味。人类的好奇心会失去动力，Web 的多元性也会跟着消亡。他表示，生成式 AI 与社媒推荐算法面临的问题相同，它们都根据收集的数据决定用户看到的内容。但 Vivaldi 希望用户能掌控自己的数据，自主决定看到的内容，希望用户能掌控一切。如果用户想使用生成式 AI，他们可以很容易访问，并不需要浏览器去集成 AI。

我最近打算开始经营小红书了（嗯，真的，打算日更，你可以来监督我，账号是 wulujia），然后就感受到了问题

A vulnerability described as critical has been identified in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/item_select. The manipulation of the argument q results in sql injection. This vulnerability is known as CVE-2025-9689. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability classified as critical was found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argument Password leads to sql injection. This vulnerability is uniquely identified as CVE-2025-9691. The attack can be launched remotely. Moreover, an exploit is present.