Aggregator

CVE-2025-5120 | huggingface smolagents up to 1.14.0 local_python_executor.py sandbox (EUVD-2025-22815)

VulDB Recent Entries
1 week 3 days ago
A vulnerability classified as critical was found in huggingface smolagents up to 1.14.0. This vulnerability affects unknown code of the file local_python_executor.py. The manipulation leads to sandbox issue. This vulnerability was named CVE-2025-5120. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Stack Exchange 迁移到云端

Solidot
1 week 3 days ago
编程问答平台 Stack Exchange 宣布迁移到云端，放弃使用自己的服务器。Stack Exchange 自 2010 年起就在新泽西州的数据中心托管旗下网站，它使用了大约 50 台服务器。如果服务器出现问题，工程师需要去现场更换或重启硬件。2023 年它的 Stack Overflow for Teams 迁移到了微软的 Azure 云，现在 Stack Overflow 和 Stack Exchange 网络托管在了 Google Cloud 云服务上。Stack Overflow 从此不再拥有任何物理数据中心或办公室，完全在云端远程工作。

Week in review: Microsoft SharePoint servers under attack, landing your first cybersecurity job

Help Net Security
1 week 3 days ago

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Microsoft pins on-prem SharePoint attacks on Chinese threat actors As Microsoft continues to update its customer guidance for protecting on-prem SharePoint servers against the latest in-the-wild attacks, more security firms have begun sharing details about the ones they have detected. How to land your first job in cybersecurity According to LinkedIn, job applications have surged over 45% in the past … More →

The post Week in review: Microsoft SharePoint servers under attack, landing your first cybersecurity job appeared first on Help Net Security.

Help Net Security

CVE-2025-8221 | jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999 GoodsCustController.java goodsSearch keyword cross site scripting (EUVD-2025-22810)

Vuldb Updates
1 week 4 days ago
A vulnerability classified as problematic was found in jerryshensjf JPACookieShop 蛋糕商城JPA版 up to 24a15c02b4f75042c9f7f615a3fed2ec1cefb999. Affected by this vulnerability is the function goodsSearch of the file GoodsCustController.java. The manipulation of the argument keyword leads to cross site scripting. This vulnerability is known as CVE-2025-8221. The attack can be launched remotely. Furthermore, there is an exploit available. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
vuldb.com

CVE-2025-8104 | Memory Usage Plugin up to 3.98 on WordPress wpmemory_install_plugin cross-site request forgery (EUVD-2025-22809)

Vuldb Updates
1 week 4 days ago
A vulnerability was found in Memory Usage Plugin up to 3.98 on WordPress. It has been rated as problematic. Affected by this issue is the function wpmemory_install_plugin. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2025-8104. The attack may be launched remotely. There is no exploit available.
vuldb.com

Managed ad