Aggregator

CNVD漏洞周报2025年第21期

CNVD漏洞平台
2 months ago
国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞488个，其中高危漏洞219个、中危漏洞240个、低危漏洞29个。

CVE-2017-7018 | Apple Safari up to 10.1.1 WebKit memory corruption (HT207921 / EDB-42373)

Vuldb Updates
2 months ago
A vulnerability, which was classified as critical, was found in Apple Safari up to 10.1.1. This affects an unknown part of the component WebKit. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2017-7018. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2007-1243 | Audins Audiens 3.3 unistall.php cnf=disinstalla Remote Code Execution (EDB-29676 / XFDB-32707)

Vuldb Updates
2 months ago
A vulnerability was found in Audins Audiens 3.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file unistall.php. The manipulation of the argument cnf=disinstalla leads to Remote Code Execution. This vulnerability is known as CVE-2007-1243. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

Arkana Ransomware Group Allegedly Claims Breach of Ticketmaster Databases

Cyber Security News
2 months ago

Arkana Security Group claims to have successfully gained access to Ticketmaster’s database infrastructure and exfiltrated massive volumes of sensitive customer data. The threat actors have reportedly announced their intentions to sell comprehensive datasets containing ticket sales records, payment methodologies, customer demographic profiles, and internal fraud resolution documentation on dark web marketplaces.  This incident potentially affects […]

The post Arkana Ransomware Group Allegedly Claims Breach of Ticketmaster Databases appeared first on Cyber Security News.

Kaaviya

CVE-2025-5867 | RT-Thread 5.1.0 lwp_syscall.c csys_sendto null pointer dereference (Issue 10299 / EUVD-2025-17443)

Vuldb Updates
2 months ago
A vulnerability classified as critical was found in RT-Thread 5.1.0. This vulnerability affects the function csys_sendto of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument to leads to null pointer dereference. This vulnerability was named CVE-2025-5867. The attack needs to be approached within the local network. There is no exploit available.
vuldb.com

CVE-2025-5868 | RT-Thread 5.1.0 lwp_syscall.c sys_thread_sigprocmask how array index (Issue 10303 / EUVD-2025-17441)

Vuldb Updates
2 months ago
A vulnerability, which was classified as critical, has been found in RT-Thread 5.1.0. This issue affects the function sys_thread_sigprocmask of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument how leads to improper validation of array index. The identification of this vulnerability is CVE-2025-5868. The attack can only be done within the local network. There is no exploit available.
vuldb.com

谷歌CEO皮查伊：为什么说AI意义将超越火与电？

Solidot
2 months ago

谷歌CEO桑达尔·皮查伊接受《Lex Fridman Podcast》深度访谈，分享了从个人成长到AI战略的深刻见解。一年前谷歌在AI竞赛中被批评落后，但随着Gemini系列模型发布，已重回领先地位。皮查伊的核心决策原则是"信号降噪"——将外界批评视为噪音，专注第一性原理和长期技术趋势。他在压力下果断合并DeepMind与Google Brain两大AI团队，推动公司全面转向"AI优先"。皮查伊认为AI是比火与电更深远的技术革命，因其递归自我改进能力将极大加速创造本身。关于AGI时间表，他预测略晚于2030年，但对P(Doom)保持乐观，相信人类会在面临真正威胁时团结应对。在产品层面，谷歌正通过AI Overviews和AI Mode重塑搜索体验，同时布局XR和机器人等未来计算平台。皮查伊的童年经历——从缺水缺电到拥有热水和电话的技术跃迁——塑造了他对科技改变生活力量的坚定信念。他倡导"登月思维"，认为雄心勃勃的目标能吸引顶尖人才，即使只实现60%也是巨大成功。查看全文

Beware for Developers: 16 React Native Packages with Millions of Downloads Compromised Overnight

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
2 months ago

Cybersecurity researchers have uncovered a large-scale attack targeting the npm ecosystem, compromising 16 popular React Native packages with a combined download count exceeding one million per week. The attack, detected on June 6th, 2025, represents a significant escalation in the ongoing campaign by a sophisticated threat actor, previously linked to the compromise of the rand-user-agent […]

The post Beware for Developers: 16 React Native Packages with Millions of Downloads Compromised Overnight appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

CVE-2017-7018 | Apple tvOS up to 10.2.1 WebKit memory corruption (HT207924 / EDB-42373)

Vuldb Updates
2 months ago
A vulnerability was found in Apple tvOS up to 10.2.1. It has been classified as critical. This affects an unknown part of the component WebKit. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2017-7018. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad