Aggregator

全面刨析2024年数字安全产业发展态势，附下载地址。

A vulnerability, which was classified as problematic, was found in X.org X11 Server. Affected is the function RRChangeProviderProperty of the component RandR Extension. The manipulation leads to integer overflow. This vulnerability is traded as CVE-2025-49180. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability classified as problematic has been found in X.org X11 Server. This affects the function RecordSanityCheckRegisterClients of the component TigerVNC. The manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2025-49179. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in X.org X11 Server and classified as problematic. This issue affects some unknown processing of the component TigerVNC. The manipulation leads to integer overflow. The identification of this vulnerability is CVE-2025-49176. Local access is required to approach this attack. There is no exploit available.

A malicious campaign has emerged, targeting Chinese-speaking users through fake installers of popular software such as WPS Office, Sogou, and DeepSeek. This operation, attributed with medium confidence to the China-based adversary group Silver Fox, leverages phishing websites that mimic legitimate software portals to distribute malware payloads, primarily in the form of MSI files. Sophisticated Phishing […]

The post Threat Actors Impersonate WPS Office and DeepSeek to Spread Sainbox RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

干货分享 如何借助LLM实现Web应用指纹识别的突破

A vulnerability was found in BEA WebLogic up to 8.1. It has been rated as problematic. This issue affects some unknown processing of the component JDBC Connection Reset Handler. The manipulation leads to cleartext storage of sensitive information. The identification of this vulnerability is CVE-2005-1742. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic has been found in BEA WebLogic up to 8.1. Affected is an unknown function of the component Auditing. The manipulation leads to denial of service. This vulnerability is traded as CVE-2005-1742. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic was found in BEA WebLogic up to 8.1. Affected by this vulnerability is an unknown functionality of the component Security Settings Handler. The manipulation leads to an unknown weakness. This vulnerability is known as CVE-2005-1742. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, has been found in BEA WebLogic Server up to 8.1. This issue affects some unknown processing of the file loginform.jsp of the component Administration Console. The manipulation leads to basic cross site scripting. The identification of this vulnerability is CVE-2005-1747. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Red Hat Enterprise Linux up to 1.3.15. Affected by this vulnerability is an unknown functionality of the component Proxy Server. The manipulation leads to cleartext storage of sensitive information. This vulnerability is known as CVE-2005-1760. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in RealNetworks RealPlayer 10.0.5 and classified as critical. This vulnerability affects unknown code of the file rtffplin.cpp. The manipulation leads to heap-based buffer overflow. This vulnerability was named CVE-2005-1766. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in HP HP-UX up to b.11.00. It has been declared as critical. This vulnerability affects unknown code of the component Telnet. The manipulation leads to Remote Code Execution. This vulnerability was named CVE-2005-1771. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

ФБР официально признало: авиационная отрасль находится в шаге от киберкатастрофы.

An IT worker has been jailed for launching a cyber-attack after he was suspended at work

A vulnerability, which was classified as critical, was found in Samsung Kies Air 2.1.210161. Affected is an unknown function. The manipulation leads to improper authentication. This vulnerability is traded as CVE-2012-5858. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A ransomware attack on grocery giant Ahold Delhaize led to a data breach that affected more than 2.2 million people. A ransomware attack on Dutch grocery giant Ahold Delhaize has led to a data breach affecting over 2.2 million people. Ahold Delhaize is a Dutch-Belgian multinational retail and wholesale holding company. Its name comes from the […]

A vulnerability was found in dhcpcd 1.3.17 Pl2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file client.c of the component DHCP Reply Handler. The manipulation leads to memory corruption. This vulnerability is known as CVE-2005-1848. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in PeerCast 0.1211. It has been classified as critical. Affected is an unknown function. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2005-1806. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.