通知 | 网安标委发布《网络安全标准实践指南——个人信息保护合规审计 专业机构服务能力要求》（附全文）
近日，网安标委发布《网络安全标准实践指南——个人信息保护合规审计 专业机构服务能力要求》。
Aggregator
专家解读 | 推进网络身份认证公共服务建设 筑牢公民个人身份信息保护基石
6 months 4 weeks ago
公民个人身份信息保护问题备受社会公众关切。随着线上线下需要提供身份信息的场景日益丰富，公民个人身份信息的泄露风险亦日渐高企。对此，公安部、国家互联网信息办公室等部门经过反复研究并广泛征求意见，制定《国家网络身份认证公共服务管理办法》。
Rhysida
6 months 4 weeks ago
You must login to view this content
cohenido
CVE-2025-1985 | Pepperl+Fuchs Profinet Gateway FB8122A.1.EL up to 1.3.12 Web UI cross site scripting (VDE-2025-011)
6 months 4 weeks ago
A vulnerability classified as problematic was found in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL up to 1.3.12. Affected by this vulnerability is an unknown functionality of the component Web UI. The manipulation leads to cross site scripting.
This vulnerability is known as CVE-2025-1985. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-4057 | Red Hat AMQ Broker 7 ActiveMQ Artemis weak credentials
6 months 4 weeks ago
A vulnerability classified as problematic has been found in Red Hat AMQ Broker 7. Affected is an unknown function of the component ActiveMQ Artemis. The manipulation leads to use of weak credentials.
This vulnerability is traded as CVE-2025-4057. It is possible to launch the attack on the local host. There is no exploit available.
vuldb.com
CVE-2025-41655 | Pepperl+Fuchs Profinet Gateway FB8122A.1.EL up to 1.3.12 URL missing authentication (VDE-2025-011)
6 months 4 weeks ago
A vulnerability was found in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL up to 1.3.12. It has been rated as critical. This issue affects some unknown processing of the component URL Handler. The manipulation leads to missing authentication.
The identification of this vulnerability is CVE-2025-41655. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
近期网络安全处罚案例汇总
6 months 4 weeks ago
第一届OpenHarmony CTF专题赛报名开启！
6 months 4 weeks ago
第一届OpenHarmony CTF专题赛邀你披荆斩棘，成为开源安全的“破壁者”！
CVE-2025-41654 | Pepperl+Fuchs Profinet Gateway FB8122A.1.EL up to 1.3.12 SNMP Protocol information disclosure (VDE-2025-011)
6 months 4 weeks ago
A vulnerability was found in Pepperl+Fuchs Profinet Gateway FB8122A.1.EL and Profinet Gateway LB8122A.1.EL up to 1.3.12. It has been declared as problematic. This vulnerability affects unknown code of the component SNMP Protocol Handler. The manipulation leads to information disclosure.
This vulnerability was named CVE-2025-41654. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-40672 | Grupo Espiral MS ProactivaNet 3.24.0.0 panLoad.exe permission assignment
6 months 4 weeks ago
A vulnerability was found in Grupo Espiral MS ProactivaNet 3.24.0.0. It has been classified as critical. This affects an unknown part of the file panLoad.exe. The manipulation leads to incorrect permission assignment.
This vulnerability is uniquely identified as CVE-2025-40672. An attack has to be approached locally. There is no exploit available.
vuldb.com
CVE-2025-40671 | AES Multimedia Gestnet 1.07 articles.php fk_remoto_central sql injection
6 months 4 weeks ago
A vulnerability was found in AES Multimedia Gestnet 1.07 and classified as critical. Affected by this issue is the function fk_remoto_central of the file /webservices/articles.php. The manipulation leads to sql injection.
This vulnerability is handled as CVE-2025-40671. The attack may be launched remotely. There is no exploit available.
vuldb.com
APP安全&大数据杀熟 | 《即刻说》第8期片段抢先看
6 months 4 weeks ago
当心！TikTok 视频竟成信息窃取恶意软件 “帮凶”
6 months 4 weeks ago
TikTok 视频现成信息窃取恶意软件传播新渠道，谨防中招。
科锐软件逆向53期预科班、正式班开始火爆招生报名啦！！！
6 months 4 weeks ago
欢迎您加入科锐！和正能量的同学们一同前行！用汗水挥洒青春,用拼搏诠释梦想！
调试器开发技术-Linux调试器与Windows调试器实现细节探究
6 months 4 weeks ago
看雪论坛作者ID：TeddyBe4r
79% Regret Their Security Stack. Here’s Why Veriti Customers Don’t.
6 months 4 weeks ago
Gartner says 79% of technology buyers regret their last purchase1. That number isn’t just high – it’s damning. This isn’t about UI preferences or feature gaps; it’s about trust lost, budgets wasted, and CISOs left holding the bag when outcomes don’t match expectations. The question is: why? The answer? Most tools stop at visibility. They flag […]
The post 79% Regret Their Security Stack. Here’s Why Veriti Customers Don’t. appeared first on VERITI.
The post 79% Regret Their Security Stack. Here’s Why Veriti Customers Don’t. appeared first on Security Boulevard.
Veriti
CVE-2008-1800 | DivX DivXDB 0.94b index.php cross site scripting (EDB-31590 / XFDB-41634)
6 months 4 weeks ago
A vulnerability has been found in DivX DivXDB 0.94b and classified as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation leads to cross site scripting.
This vulnerability is known as CVE-2008-1800. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
Большой адронный коллайдер? Детская забава по сравнению с тем, что устраивают умирающие звёзды
6 months 4 weeks ago
Каждый взрыв сверхновой — это короткометражка по физике будущего. Но вы её никогда не увидите.
Хватило трёх 0Day, чтобы превратить Versa Concerto в инструмент для захвата систем связи
6 months 4 weeks ago
Заголовок, декодирование и контейнер — и вы уже внутри сети.
安全热点周报：Ivanti EPMM 远程代码执行漏洞已被利用于有限的攻击中
6 months 4 weeks ago