Aggregator

A vulnerability, which was classified as critical, was found in Quantum StorNext up to 7.2.3. This affects an unknown part of the component Web GUI API. The manipulation leads to hard-coded credentials. This vulnerability is uniquely identified as CVE-2025-46617. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Icegram Express Plugin up to 5.7.49 on WordPress. Affected by this issue is some unknown functionality of the component Template Setting Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-0671. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Mitsubishi Electric CC-Link IE TSN Remote IO Module. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper validation of specified quantity in input. This vulnerability is known as CVE-2025-3511. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in Quantum StorNext up to 7.2.3. Affected is an unknown function of the component Web GUI API. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2025-46616. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Bit Contact Form Form Plugin up to 2.18.3 on WordPress. Affected is an unknown function of the component SVG File Upload Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-2580. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as critical was found in Prevent Direct Access Plugin up to 2.8.8.2 on WordPress. Affected by this vulnerability is the function pda_lite_custom_permission_check. The manipulation leads to improper authorization. This vulnerability is known as CVE-2025-3861. The attack can be launched remotely. There is no exploit available.

DeepMind 宣布发布 Lyria 2 音乐生成模型。第一代的音乐生成模型 Lyria 是在 2023 年发布的。Lyria 2 能提供高保真音乐和专业级音频输出，能捕捉不同音乐类型和复杂乐曲中的细微差别。Google 还同时开发了 Lyria RealTime，允许用户实时交互式地创作、演奏和控制音乐，混合不同音乐类型、融合不同风格，随时塑造音频。

Trend Research has uncovered a sophisticated network of cybercrime operations linked to North Korea, heavily utilizing Russian internet infrastructure. Specifically, IP address ranges in the towns of Khasan and Khabarovsk, Russia, assigned to organizations under TransTelecom (ASN AS20485), are pivotal in these activities. Khasan, just a mile from the North Korea-Russia border and connected via […]

The post Russian VPS Servers With RDP and Proxy Servers Enable North Korean Cybercrime Operations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability, which was classified as problematic, has been found in Winter CMS up to 1.2.2. Affected by this issue is some unknown functionality of the component SVG Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2023-37269. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in WP-Optimize Plugin and SrbTransLatin Plugin on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTML Character Handler. The manipulation leads to HTML injection. This vulnerability is known as CVE-2023-1119. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in fossbilling up to 0.5.3. This issue affects some unknown processing. The manipulation leads to open redirect. The identification of this vulnerability is CVE-2023-3568. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Теперь даже преступники без опыта могут подделать любой сайт за пару кликов.

大部分哺乳动物都是雄性主导，但也有少部分是雌性主导，其中之一是人类近亲倭黑猩猩。在倭黑猩猩中，雄性的体型比雌雄更大，但为什么雌性能掌权？根据发表在《Communications Biology》期刊上的一项研究，研究人员基于三种假说——自组织，生育控制和雌性结盟——分析了刚果民主共和国六个倭黑猩猩群体 30 年的冲突观察记录，发现相关性最高的是第三种假说——也就是雌性通过结盟压制雄性保持其权力。对雄性挑起的冲突观察发现，雌性采用联盟的策略予以回击。在所有结盟的案例中，85% 来自雌性。研究人员表示，雄性主导并非演化的必然结果。

分享一篇文章。

分享一篇文章。

2025年4月25日，深瞳漏洞实验室监测到一则Commvault-WebServer组件存在代码执行漏洞的信息，漏洞编号：CVE-2025-34028，漏洞威胁等级：严重。

分享一篇文章。

分享一篇文章。

2025年4月25日，深瞳漏洞实验室监测到一则Commvault-WebServer组件存在代码执行漏洞的信息，漏洞编号：CVE-2025-34028，漏洞威胁等级：严重。

Microsoft’s recent attempt to resolve a critical privilege escalation vulnerability has inadvertently introduced a new denial-of-service (DoS) flaw in Windows systems, leaving organizations vulnerable to update failures and potential security risks. In early April 2025, Microsoft addressed CVE-2025-21204, a security flaw that allowed attackers to abuse symbolic links (symlinks) to elevate privileges via the Windows servicing […]

The post Microsoft’s Patch for Symlink Vulnerability Introduces New Windows Denial-of-Service Flaw appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.