Aggregator
CVE-2025-10588 | PixelYourSite Plugin up to 11.1.2 on WordPress Setting adminEnableGdprAjax cross-site request forgery
CVE-2025-10570 | Flexible Refund and Return Order for WooCommerce Plugin save_refund_request authorization
神秘象(Mysterious Elephant)APT组织的攻击技术持续演化分析
【人物调研】美国反情报与安全中心主任乔治·斯特里特
使用在线研究方法调查一个人的人、地点和时间
CVE-2025-11419 | Red Hat KeyCloak TLS Client denial of service (WID-SEC-2025-2224)
OpenAI 发布 AI 浏览器 ChatGPT Atlas
Qilin
You must login to view this content
Qilin
You must login to view this content
Нашли "козла отпущения". Инженер, делавший "дыры" в iOS, в панике выключил свой iPhone после уведомления Apple
直播预告:2025 TECHWORLD 绿盟科技智慧安全大会
AI时代来临,CISO重塑企业安全组织,行业迎来新变革
CVE-1999-0913 | Network Security Wizards Dragon-Fire IDS 1.0 dfire.cgi Metacharacter privileges management (EDB-19444 / ID 10212)
CVE-1999-0922 | Allaire Coldfusion Server 4.0 sourcewindow.cfm Source information disclosure (ASB99-02 / ID 10129)
CVE-1999-0920 | University of Washington POP2d/IMAP4 4.4 memory corruption (EDB-19226 / Nessus ID 10130)
CVE-1999-0911 | ProFTPD/Wu-FTPD/BeroFTPD MKD/CWD Command Nested Directories memory corruption (EDB-19475 / Nessus ID 10190)
CVE-1999-0923 | Allaire Coldfusion Server 4.0 Snippet privileges management (ASB99-02 / ID 10149)
Vidar Stealer Exploits: Direct Memory Attacks Used to Capture Browser Credentials
On October 6, 2025, the cybercriminal developer known as “Loadbaks” announced the release of Vidar Stealer v2.0 on underground forums, introducing a sophisticated information-stealing malware that employs direct memory injection to bypass modern browser security protections. This new version represents a complete architectural overhaul, transitioning from C++ to a pure C implementation that allegedly enhances […]
The post Vidar Stealer Exploits: Direct Memory Attacks Used to Capture Browser Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
ZYXEL Authorization Bypass Vulnerability Let Attackers View and Download System Configuration
A critical authorization bypass vulnerability has emerged in ZYXEL’s ATP and USG series network security appliances, allowing attackers to circumvent two-factor authentication protections and gain unauthorized access to sensitive system configurations. Tracked as CVE-2025-9133, this security flaw affects devices running ZLD firmware version 5.40 and was publicly disclosed on October 21, 2025, following a coordinated […]
The post ZYXEL Authorization Bypass Vulnerability Let Attackers View and Download System Configuration appeared first on Cyber Security News.