Aggregator

一年一度的“大考”火热进行中，攻防演练期间本公众号会每日更新当天鲜活情报和热点漏洞，欢迎大家对我们进行收藏和关注！

当前环境异常，需完成验证后方可继续访问。

Google has released a security update for Chrome to address half a dozen vulnerabilities, one of them actively exploited by attackers to escape the browser's sandbox protection. [...]

火狐浏览器中国版即将停止运营，用户需备份数据并切换至国际版。可通过官网来源或关于页面判断版本。备份方法为复制配置文件夹，恢复时卸载中国版、安装国际版后将备份文件导入配置目录即可同步数据。

文章介绍了如何通过导航访问Reddit主页、下载应用以及登录功能的使用方法。

Крупнейший рынок даркнета растворился. С деньгами клиентов.

2025年7月2日，国家信息安全漏洞共享平台（CNVD）收录了Google Chrome V8类型混淆漏洞（CNVD-2025-14800，对应CVE-2025-6554）。

当前环境出现异常状态，需完成验证后方可继续访问服务。

Cloudflare’s latest DDoS Threat Report for the second quarter of 2025 reveals that the company autonomously mitigated the largest-ever recorded distributed denial-of-service (DDoS) attacks, peaking at an unprecedented 7.3 terabits per second (Tbps) and 4.8 billion packets per second (Bpps). These hyper-volumetric assaults, which surged dramatically, underscore the relentless evolution of attack vectors targeting critical […]

The post Massive DDoS Attack Slams Internet with 7.3 Tbps and 4.8 Billion Packets Per Second appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

文章推荐了2024年十三张值得聆听的华语乐坛好专辑，涵盖独立与主流音乐人作品，展现了多样化的音乐风格与创作才华。

CyCognito research finds that a third of education sector APIs, web apps and cloud assets are exposed to attack

当前环境出现异常，需完成验证后方可继续访问。

安全筑基金融信任，合规保障科技落地。

A vulnerability was suspected in libsoup. This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

A vulnerability was found in RVC-Boss GPT-SoVITS up to 20250228v3. It has been rated as critical. This issue affects the function open_slice of the file webui.py. The manipulation leads to command injection. The identification of this vulnerability is CVE-2025-49833. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in RVC-Boss GPT-SoVITS up to 20250228v3. Affected is the function open_denoise of the file webui.py. The manipulation leads to command injection. This vulnerability is traded as CVE-2025-49834. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as critical was found in RVC-Boss GPT-SoVITS up to 20250228v3. Affected by this vulnerability is the function open_asr of the file webui.py. The manipulation leads to command injection. This vulnerability is known as CVE-2025-49835. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in RVC-Boss GPT-SoVITS up to 20250228v3. Affected by this issue is the function uvr of the file bsroformer.py. The manipulation of the argument model_choose leads to deserialization. This vulnerability is handled as CVE-2025-49839. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in RVC-Boss GPT-SoVITS up to 20250228v3. This affects the function change_label of the file webui.py. The manipulation leads to command injection. This vulnerability is uniquely identified as CVE-2025-49836. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in RVC-Boss GPT-SoVITS up to 20250228v3 and classified as critical. This vulnerability affects the function uvr of the file vr.py. The manipulation of the argument model_choose leads to deserialization. This vulnerability was named CVE-2025-49837. The attack can be initiated remotely. There is no exploit available.