Aggregator

r/deepweb是一个Reddit社区，旨在澄清都市传说并分享来自Tor深网的真实可验证信息。

Currently trending CVE - Hype Score: 1 - An issue was discovered in Commvault before 11.36.60. During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control. This is limited to the setup phase, before any jobs have been ...

Currently trending CVE - Hype Score: 1 - An issue was discovered in Commvault before 11.36.60. A security vulnerability has been identified that allows remote attackers to inject or manipulate command-line arguments passed to internal components due to insufficient input validation. Successful exploitation results in a ...

Currently trending CVE - Hype Score: 1 - An issue was discovered in Commvault before 11.36.60. A vulnerability in a known login mechanism allows unauthenticated attackers to execute API calls without requiring user credentials. RBAC helps limit the exposure but does not eliminate risk.

Currently trending CVE - Hype Score: 1 - An issue was discovered in Commvault before 11.36.60. A security vulnerability has been identified that allows remote attackers to perform unauthorized file system access through a path traversal issue. The vulnerability may lead to remote code execution.

Currently trending CVE - Hype Score: 21 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and does not set the pointer to NULL. It calls ksmbd_krb5_authenticate to reinitialise sess->user but that function may return ...

Let’s come straight to the point! Kratikal gives you AutoSecT. Your security is the main driving point that made it possible to build the world’s leading VMDR and pentesting platform, powered by AI. Do you know what’s more interesting? Your network infrastructure can have the strongest security shield that no other tool provides. AutoSecT network […]

The post Looking for the Best VMDR and Pentesting Tool? The Breakthrough appeared first on Kratikal Blogs.

The post Looking for the Best VMDR and Pentesting Tool? The Breakthrough appeared first on Security Boulevard.

文章介绍了AutoSecT作为一款结合VMDR和渗透测试的AI驱动工具，具备全面覆盖网络、云、Web应用等的高精度扫描能力，并通过智能优先级排序和多种集成工具（如JIRA、Slack）简化合规性和风险处理流程。其可扩展性使其适用于各种规模的企业环境。

A vulnerability categorized as problematic has been discovered in Microsoft SQL Server. Impacted is an unknown function. The manipulation results in information disclosure. This vulnerability is known as CVE-2025-49719. It is possible to launch the attack remotely. No exploit is available. It is advisable to implement a patch to correct this issue.

A vulnerability, which was classified as problematic, has been found in Dynamic XWiki up to 17.3.0. The impacted element is an unknown function of the component Administration Interface. Performing manipulation of the argument Meta Info results in improper neutralization of special elements used in a template engine. This vulnerability is identified as CVE-2025-51991. The attack can be initiated remotely. There is not any exploit available.

A vulnerability identified as problematic has been detected in elysia-cors Library up to 1.3.0. This issue affects some unknown processing. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is traded as CVE-2025-50864. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability marked as critical has been reported in Odin Secure FTP up to 4.1. The affected element is an unknown function of the component LIST Command Handler. This manipulation causes stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is handled as CVE-2010-10014. The attack can be initiated remotely. There is not any exploit available.

A vulnerability described as critical has been identified in CursorArts FileWrangler up to 5.30. The impacted element is an unknown function of the component FTP Server. Such manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2010-20045. The attack can be launched remotely. No exploit exists.

A vulnerability was found in Xion Audio Player up to 1.0.126 and classified as critical. This affects an unknown part. Such manipulation leads to stack-based buffer overflow. This vulnerability is listed as CVE-2010-20042. The attack may be performed from a remote location. There is no available exploit.

A vulnerability described as critical has been identified in Tenda AC6 15.03.06.23. Affected is the function fromSetSysTime. Executing manipulation of the argument Time can lead to buffer overflow. This vulnerability is handled as CVE-2025-55498. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability classified as critical was found in Tenda AC6 15.03.06.23_multi. Affected by this issue is the function formSetCfm. The manipulation results in buffer overflow. This vulnerability was named CVE-2025-55482. The attack may be performed from a remote location. In addition, an exploit is available.

A vulnerability, which was classified as problematic, was found in Action XWiki up to 17.3.0. This vulnerability affects unknown code of the component Administration Interface. Such manipulation of the argument Version leads to cross site scripting. This vulnerability is referenced as CVE-2025-51990. It is possible to launch the attack remotely. No exploit is available.

A vulnerability classified as problematic has been found in Liferay Portal and DXP. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2025-43748. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability identified as critical has been detected in Microsoft Windows. The affected element is an unknown function of the component Fast FAT File System Driver. This manipulation causes heap-based buffer overflow. This vulnerability is handled as CVE-2025-49721. It is possible to launch the attack on the local host. There is not any exploit available. Applying a patch is the recommended action to fix this issue.

随手记录，毫无价值