Aggregator

Submit #616217 / VDB-316852

A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the function makeToken of the file src/main/java/com/xxl/job/admin/controller/IndexController.java of the component Token Generation. The manipulation leads to password hash with insufficient computational effort. This vulnerability is handled as CVE-2025-7789. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical. Affected by this vulnerability is the function commandJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to os command injection. This vulnerability is known as CVE-2025-7788. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. This vulnerability is traded as CVE-2025-7787. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Submit #616196 / VDB-316851

То, что нашли в тетради 42-летнего следователя, шокировало даже его коллег.

Submit #615760 / VDB-316850

Submit #615758 / VDB-316849

Submit #615741 / VDB-316848

Alice、Bob、Eve等角色通过将密码学转化为人类可理解的故事，使复杂理论更贴近生活。这些象征性的角色展示了我们在数字时代面临的信任与安全挑战。

A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-7786. The attack may be initiated remotely. Furthermore, there is an exploit available.

一个开放的黑客社区，旨在帮助新手成长为资深地下技能专家。用户可提问、解答、学习，并通过Discord链接加入在线交流。

Submit #615735 / VDB-316847

Как украсть сессию, не вставая с кресла.

A vulnerability was found in Gnuboard 5.5.4/5.5.5. It has been classified as critical. This affects an unknown part of the component Change Password Handler. The manipulation leads to permission issues. This vulnerability is uniquely identified as CVE-2022-44216. Access to the local network is required for this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Gnuboard 6.0.7 and classified as critical. This issue affects some unknown processing. The manipulation leads to permissive cross-domain policy with untrusted domains. The identification of this vulnerability is CVE-2024-41475. The attack may be initiated remotely. There is no exploit available.

经济学人报道，癌症预防工作取得了成效，自 1990 年代以来发达国家癌症死亡率普遍下降。美国的癌症死亡率自 1990 年代以来下降了约三分之一。发达国家吸烟率下降，仅美国自 1975 年以来就减少了逾 300 万例癌症死亡。英国于 2008 年启动了针对年轻女孩的 HPV 疫苗接种计划，在 15 年内让 20 多岁女性的宫颈癌发病率降低了 90%。治疗方法的进步也改变了部分癌症的治疗结果。曾经致命的儿童白血病，如今五年生存率已超过九成。然而癌症研究的未来面临重重障碍，其中之一是美国特朗普政府计划削减癌症研究经费，中国预计在 2025 年超过美国成为癌症研究的主要资助国。