Aggregator

A CVSS score 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Vladislav Berghici of Trend Research' was reported to the affected vendor on: 2025-08-21, 5 days ago. The vendor is given until 2025-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mat Powell of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-08-21, 7 days ago. The vendor is given until 2025-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mat Powell of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-08-21, 7 days ago. The vendor is given until 2025-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mat Powell of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-08-21, 7 days ago. The vendor is given until 2025-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mat Powell of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-08-21, 7 days ago. The vendor is given until 2025-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mat Powell of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-08-21, 7 days ago. The vendor is given until 2025-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mat Powell of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-08-21, 7 days ago. The vendor is given until 2025-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Mat Powell of Trend Zero Day Initiative' was reported to the affected vendor on: 2025-08-21, 7 days ago. The vendor is given until 2025-12-19 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

苹果修复了一个存在于ImageIO框架中的零日漏洞（CVE-2025-43300），该漏洞可能导致内存损坏并被用于针对特定目标的复杂攻击。已发布适用于iOS、iPadOS和macOS的更新版本以修复此问题，并指出这是今年修复的第七个被滥用的零日漏洞。

Apple has released security updates to address a security flaw impacting iOS, iPadOS, and macOS that it said has come under active exploitation in the wild. The zero-day out-of-bounds write vulnerability, tracked as CVE-2025-43300 (CVSS score: 8.8), resides in the ImageIO framework and could result in memory corruption when processing a malicious image. "Apple is aware of a report that

一位曾因社交焦虑、被霸凌和利用而缺乏自信的双面人寻求关于如何变得有趣、吸引人及受欢迎的真实建议，并希望获得相关书籍或播客推荐。

Cybercriminals are using advanced social engineering and AI-generated content to make malicious URLs difficult for users to identify, according to Proofpoint. Whether through email, text messages, or collaboration apps, URL-based threats now dominate the cyber threat landscape. Attackers are not just impersonating trusted brands, they are abusing legitimate services, tricking users with fake error prompts, and bypassing traditional security by embedding threats in QR codes and SMS messages. Cybercriminals favor URLs over attachments The gap … More →

The post URL-based threats become a go-to tactic for cybercriminals appeared first on Help Net Security.

Почему миллионы людей доверяют виртуальному бобу больше, чем собственной силе воли.

Delta Electronicsが提供するDIAViewには、‘.../...//‘に関するパストラバーサルの脆弱性が存在します。

A vulnerability classified as critical has been found in helmetjs content-security-policy-parser up to 0.5.x. Impacted is an unknown function. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). This vulnerability is uniquely identified as CVE-2025-55164. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability identified as problematic has been detected in WellChoose Organization Portal System up to IFTOP_P3_2_1_196. This impacts an unknown function. This manipulation causes absolute path traversal. This vulnerability is tracked as CVE-2025-8909. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability classified as problematic has been found in WellChoose Organization Portal System up to IFTOP_P3_2_1_196. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2025-8910. The attack can be initiated remotely. There is not any exploit available.

A vulnerability classified as problematic was found in WellChoose Organization Portal System up to IFTOP_P3_2_1_196. This vulnerability affects unknown code. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2025-8911. The attack can be launched remotely. No exploit exists.

A vulnerability labeled as problematic has been found in NamelessMC Nameless up to 2.2.3. This issue affects some unknown processing. Such manipulation of the argument list leads to information disclosure. This vulnerability is documented as CVE-2025-54118. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability classified as problematic was found in NamelessMC Nameless up to 2.2.3. This affects an unknown function. The manipulation results in basic cross site scripting. This vulnerability is known as CVE-2025-54117. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.