Aggregator

Former Indian MP’s Terror Trial Was Largely Conducted in Her Absence

不安全
10 months 2 weeks ago
2008年印度马莱冈爆炸案中，七人被指控为凶手并最终无罪释放。嫌疑人普拉吉亚·塔库尔曾被指控参与爆炸案及另一起谋杀案，均因证据不足获释。她曾担任国会议员，在任期间因发表争议性言论引发关注，并多次因健康原因缺席庭审。

Threat Actors Embed Malicious RMM Tools to Gain Silent Initial Access to Organizations

Cyber Security News
10 months 2 weeks ago

A sophisticated cyber campaign leveraging legitimate Remote Monitoring and Management (RMM) tools has emerged as a significant threat to European organizations, particularly those in France and Luxembourg. Since November 2024, threat actors have been deploying carefully crafted PDF documents containing embedded links to RMM installers, effectively bypassing traditional email security measures and malware detection systems. […]

The post Threat Actors Embed Malicious RMM Tools to Gain Silent Initial Access to Organizations appeared first on Cyber Security News.

Tushar Subhra Dutta

聊聊关于深入理解安全运营

航行笔记
10 months 2 weeks ago
在企业做安全运营的同学，如何将繁杂的技术、工具和流程，真正转化为企业看得见的安全能力？这背后需要的是体系化的思考和持续的优化。 本周日（8月3日）晚19:30，我会在直播间和大家一起聊聊关于“深入理解安全运营”这个话题，分享我近二十年在安全行业沉淀的经验和思考。 欢迎大家把关于这场直播的预告，分享给你身边正在做企业安全运营、或者是想了解企业安全运营的小伙伴们，一起来交流和学习。 点击下方按钮，立即预约直播！

CVE-2025-27778 | IAHispano Applio up to 3.2.8-bugfix infer.py deserialization (GHSL-2024-341)

Vuldb Updates
10 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in IAHispano Applio up to 3.2.8-bugfix. Affected by this issue is some unknown functionality of the file infer.py. The manipulation leads to deserialization. This vulnerability is handled as CVE-2025-27778. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-27779 | IAHispano Applio up to 3.2.8-bugfix model_blender.py model_fusion_a/model_fusion_b deserialization (GHSL-2024-341)

Vuldb Updates
10 months 2 weeks ago
A vulnerability, which was classified as critical, was found in IAHispano Applio up to 3.2.8-bugfix. This affects the function model_fusion_a/model_fusion_b of the file model_blender.py. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2025-27779. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2025-27776 | IAHispano Applio up to 3.2.7 on Applio model_download.py server-side request forgery (GHSL-2024-341)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in IAHispano Applio up to 3.2.7 on Applio. It has been rated as critical. This issue affects some unknown processing of the file model_download.py. The manipulation leads to server-side request forgery. The identification of this vulnerability is CVE-2025-27776. The attack may be initiated remotely. There is no exploit available.
vuldb.com

CVE-2025-8168 | D-Link DIR-513 1.10 /goform/formSetWanPPPoE websAspInit curTime buffer overflow (EUVD-2025-22754)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in D-Link DIR-513 1.10. It has been rated as critical. Affected by this issue is the function websAspInit of the file /goform/formSetWanPPPoE. The manipulation of the argument curTime leads to buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is handled as CVE-2025-8168. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad