Aggregator

Как 6000 строк кода сделали из нейросети апокалиптического диктатора.

用户使用Systems ProJet 660 Pro 3D打印机（HP11打印头），因HP停产该部件且每次更换需大量消耗材料。已尝试使用兼容打印头（如AliExpress），但仅能工作一次即被标记为需更换。寻求硬件黑客/逆向工程师合作以理解验证机制、绕过软件检查并延长设备寿命。同时询问类似项目（如EEPROM重置）及活跃社区信息。

A vulnerability was found in OpenSSL 3.5.0. It has been declared as critical. This affects the function x509_main of the file apps/x509.c of the component x509 Application. The manipulation leads to improper certificate validation. This vulnerability is uniquely identified as CVE-2025-4575. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in CPython. Affected by this issue is the function bytes.decode. The manipulation leads to use after free. This vulnerability is handled as CVE-2025-4516. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Mozilla Thunderbird up to 137.x. Affected by this issue is some unknown functionality. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2025-4092. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Python CPython up to 3.14.0b1. Affected by this vulnerability is the function TarFile.extractall/TarFile.extract. The manipulation leads to path traversal. This vulnerability is known as CVE-2025-4138. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Mozilla Firefox ESR up to 128.9. This affects an unknown part. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2025-4093. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Mozilla Thunderbird ESR up to 128.9. This vulnerability affects unknown code. The manipulation leads to memory corruption. This vulnerability was named CVE-2025-4093. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Mozilla Firefox up to 137.x. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is known as CVE-2025-4092. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

EncryptHub利用Windows漏洞CVE-2025-26633（ MSC EvilTwin）通过伪造IT信息和社会工程学传播恶意软件。攻击链包括PowerShell加载器、恶意 MSC 文件和SilentCrystal等工具，结合伪装视频会议平台掩盖活动。

EncryptHub actor exploits Windows flaw CVE-2025-26633 (“MSC EvilTwin”) with rogue MSC files and social engineering to drop malware. The threat actor EncryptHub exploits the now-patched Windows flaw CVE-2025-26633 (“MSC EvilTwin”) using rogue MSC files and social engineering to deliver malware, warns Trustwave SpiderLabs. The flaw is an improper neutralization issue in Microsoft Management Console that […]

约时间助理是一款微信小程序，帮助组织者快速统计多人空闲时间并选出最佳活动时间。通过分享活动卡片到微信群，系统生成时间段排行和可视化日历，方便安排集体活动。

A vulnerability marked as critical has been reported in Mozilla Thunderbird up to 137.x. Affected is an unknown function. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2025-4091. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability marked as problematic has been reported in Mozilla Thunderbird up to 137.x. Affected by this issue is some unknown functionality of the component Copy as cURL Handler. The manipulation leads to command injection. This vulnerability is handled as CVE-2025-4089. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability labeled as critical has been found in Mozilla Firefox up to 137.x. This issue affects some unknown processing. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2025-4091. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability labeled as problematic has been found in Mozilla Firefox up to 137.x. Affected by this vulnerability is an unknown functionality of the component Copy as cURL Handler. The manipulation leads to command injection. This vulnerability is known as CVE-2025-4089. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.