Aggregator

A vulnerability, which was classified as critical, has been found in Google Chrome. This issue affects some unknown processing of the component HTML Page. The manipulation leads to improper restriction of rendered ui layers. The identification of this vulnerability is CVE-2021-30558. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in YUI2 up to 2800. It has been classified as problematic. Affected is an unknown function of the component TreeView. The manipulation leads to cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is traded as CVE-2022-48197. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Google Chrome on Chrome OS/Lacros. It has been classified as critical. This affects an unknown part of the component Exosphere. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2022-2742. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Статья подробно раскрывает, как хакеры крадут куки, какие методы используют и как эффективно защититься от атак с перехватом куки.

A vulnerability was found in Google Chrome. It has been rated as critical. This issue affects some unknown processing of the component Browser History. The manipulation leads to use after free. The identification of this vulnerability is CVE-2022-3863. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Google Chrome. Affected is an unknown function of the component Paint. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is traded as CVE-2022-4025. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Google Chrome. It has been declared as critical. This vulnerability affects unknown code of the component Passwords. The manipulation leads to use after free. This vulnerability was named CVE-2022-3842. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Google Chrome on ChromeOS. Affected by this issue is some unknown functionality of the component Window Manager. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2022-2743. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Fortinet FortiWeb up to 6.3.20/6.4.2/7.0.2. This issue affects some unknown processing of the component HTTP Response Handler. The manipulation leads to http response splitting. The identification of this vulnerability is CVE-2022-42471. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

The widely used React Router library, a critical navigation tool for React applications, has resolved two high-severity vulnerabilities (CVE-2025-43864 and CVE-2025-43865) that allowed attackers to spoof content, alter data values, and launch cache-poisoning attacks. Developers must update to react-router v7.5.2 immediately to mitigate risks. Key Vulnerabilities and Impacts 1. CVE-2025-43864: DoS via SPA Mode Cache Poisoning Attackers could […]

The post React Router Vulnerabilities Allow Attackers to Spoof Content and Alter Values appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Как несколько секунд паники превратились в долгие часы расследований?

Allurity announces its acquisition of Croatian cybersecurity company Infigo IS. With deep technical expertise and one of southern Europe’s strongest offensive security teams, Infigo brings strengths that accelerate Allurity’s journey to become the preferred cybersecurity partner in Europe. Founded in 2005, Infigo has become one of the most respected cybersecurity companies in southern Europe, employing around 100 professionals. With a clear B2B focus from the start, Infigo supports clients across finance, high-tech manufacturing, critical infrastructure, … More →

The post Allurity acquires Infigo IS to strengthen its position in Europe appeared first on Help Net Security.

Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zero-day attacks to breach servers and gain unauthorized access. The attacks, first observed by Orange Cyberdefense SensePost on February 14, 2025, involve chaining the below vulnerabilities - CVE-2024-58136 (CVSS score: 9.0) - An improper protection of alternate path flaw in the Yii PHP

中山大学与中科院团队首次揭示了全球变暖背景下气温冷暖翻转的新现象，即气温在几天内由异常偏暖快速转变为异常偏冷，或由异常偏冷快速转变为异常偏暖的极端事件。研究发现这类事件广泛分布于全球中高纬度地区。自 20 世纪中期以来，冷暖翻转事件频次增加、强度加剧、转变加快，且未来在高排放情景下，这一趋势将进一步加剧。如果不采取有效的气候变化缓解措施，人类将在更暖的未来面对更频繁且更剧烈的“过山车”式极端翻转事件及其叠加影响。

The United States Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical security alert regarding multiple severe vulnerabilities discovered in several Planet Technology networking products. The flaws, detailed in alert ICSA-25-114-06, could allow remote attackers to take control of affected devices, manipulate sensitive data, and gain unauthorized administrative access. What Products Are Affected? CISA’s […]

The post CISA Alerts Users to Security Flaws in Planet Technology Network Products appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

雷神众测拥有该文章的修改和解释权。如欲转载或传播此文章，必须保证此文章的副本，包括版权声明等全部内容。声明雷神众测允许，不得任意修改或增减此文章内容，不得以任何方式将其用于商业目的。

悬镜安全作为《报告》主要参编单位，凭借在信创产业卓越贡献，斩获网信自主创新尖锋榜“金风帆奖”。

雷神众测拥有该文章的修改和解释权。如欲转载或传播此文章，必须保证此文章的副本，包括版权声明等全部内容。声明雷神众测允许，不得任意修改或增减此文章内容，不得以任何方式将其用于商业目的。

Один неожиданный ход обещает очистить веб от лишнего шума.

悬镜安全作为《报告》主要参编单位，凭借在信创产业卓越贡献，斩获网信自主创新尖锋榜“金风帆奖”。