马斯克宣布开源Grok 2.5 采用非标开源许可证 禁止基于该模型训练或改进其他模型
埃隆·马斯克宣布开源xAI Grok 2.5模型，采用非通用的Grok 2社区许可协议。该协议限制基于此模型训练或改进其他AI模型，仅允许修改和微调，并需标注"Powered by xAI"。此前Grok 1采用Apache 2.0许可证开放。
Aggregator
游戏ROM破解网站RHDI恢复互联网档案馆镜像服务 接下来将按周/月上传更新
1 week 3 days ago
知名游戏 ROM 破解网站 RHDI 恢复在互联网档案馆的镜像服务，并改为每周或每月更新以减少误报问题。该网站仅提供补丁和工具而不直接提供 ROM 下载。
IoT under siege: The return of the Mirai-based Gayfemboy Botnet
1 week 3 days ago
基于Mirai的Gayfemboy僵尸网络卷土重来，利用已知和零日漏洞攻击物联网设备，包括路由器、工业设备和智能家居产品。该恶意软件采用复杂模块结构进行DDoS攻击和逃避检测，并针对全球多个行业和地区展开活动。
IoT under siege: The return of the Mirai-based Gayfemboy Botnet
1 week 3 days ago
Mirai-based Gayfemboy botnet resurfaces, evolving to target systems worldwide; Fortinet researchers provided details about the new campaign. FortiGuard Labs researchers tracked a new Gayfemboy botnet campaign, the malware exploits known flaws in DrayTek, TP-Link, Raisecom, and Cisco, showing evolved tactics and renewed activity. The Gayfemboy botnet was first identified in February 2024, it borrows the […]
Pierluigi Paganini
Promised Revenge Cripples Israeli ISP “Rimon” in Apparent Iranian-Origin Cyber Assault
1 week 3 days ago
You must login to view this content
cohenido
CVE-2017-9516 | Craft CMS up to 2.6 SVG File cross site scripting (ID 142851 / EDB-42143)
1 week 3 days ago
A vulnerability marked as problematic has been reported in Craft CMS up to 2.6. This affects an unknown function of the component SVG File Handler. Performing manipulation results in cross site scripting.
This vulnerability is cataloged as CVE-2017-9516. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2017-15956 | ConverTo Video Downloader / Converter 1.4.1 download.php token input validation (ID 144456 / EDB-42927)
1 week 3 days ago
A vulnerability marked as critical has been reported in ConverTo Video Downloader and Converter 1.4.1. This vulnerability affects unknown code of the file download.php. The manipulation of the argument token as part of Parameter leads to improper input validation.
This vulnerability is traded as CVE-2017-15956. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2017-15986 | CPA Lead Reward Script Username sql injection (EDB-43073)
1 week 3 days ago
A vulnerability marked as critical has been reported in CPA Lead Reward Script. The impacted element is an unknown function. Performing manipulation of the argument Username as part of Parameter results in sql injection.
This vulnerability is cataloged as CVE-2017-15986. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2017-17605 | Consumer Complaints Clone Script 1.0 other-user-profile.php ID sql injection (ID 145310 / EDB-43274)
1 week 3 days ago
A vulnerability identified as critical has been detected in Consumer Complaints Clone Script 1.0. This issue affects some unknown processing of the file other-user-profile.php. The manipulation of the argument ID as part of Parameter leads to sql injection.
This vulnerability is traded as CVE-2017-17605. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2017-7725 | concrete5 8.1.0 Cache Host Header Stored cross site scripting (EDB-41885 / BID-97649)
1 week 3 days ago
A vulnerability was found in concrete5 8.1.0. It has been classified as problematic. This vulnerability affects unknown code of the component Cache Handler. The manipulation as part of Host Header leads to cross site scripting (Stored).
This vulnerability is traded as CVE-2017-7725. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2017-17606 | Co-work Space Search Script 1.0 /list city sql injection (ID 145292 / EDB-43273)
1 week 3 days ago
A vulnerability labeled as critical has been found in Co-work Space Search Script 1.0. Impacted is an unknown function of the file /list. The manipulation of the argument city as part of Parameter results in sql injection.
This vulnerability is known as CVE-2017-17606. It is possible to launch the attack remotely. Furthermore, an exploit is available.
vuldb.com
CVE-2017-18195 | concrete5 up to 8.2.x Comment view_ajax.php cnvID input validation (EDB-44194 / ID 53605)
1 week 3 days ago
A vulnerability described as problematic has been identified in concrete5 up to 8.2.x. This issue affects some unknown processing of the file tools/conversations/view_ajax.php of the component Comment Handler. The manipulation of the argument cnvID as part of Integer results in improper input validation.
This vulnerability is reported as CVE-2017-18195. The attack can be launched remotely. Moreover, an exploit is present.
Upgrading the affected component is recommended.
vuldb.com
CVE-2017-15984 | Creative Management System CMS 1.4 index.php sql injection (EDB-43075)
1 week 3 days ago
A vulnerability identified as critical has been detected in Creative Management System CMS 1.4. Impacted is an unknown function of the file index.php. This manipulation of the argument S as part of Parameter causes sql injection.
This vulnerability is tracked as CVE-2017-15984. The attack is possible to be carried out remotely. Moreover, an exploit is present.
vuldb.com
回答一个关于 ViewState 反序列化的问题，感兴趣的朋友可以看一下
1 week 3 days ago
ysoserial.Net 工具存在一个鲜为人知的参数可以绕过默认限制，触发实验性验证操作。这篇文章以红队视角揭秘该方法的思路与实战技巧，让渗透测试爱好者和安全研究者开拓视野、掌握新技能！
苹果通过iOS 26为iPhone 16系列带来25W无线充电 但仅限于MagSafe配件
1 week 3 days ago
苹果通过 iOS 26 为 iPhone 16 系列带来 Qi 2.2 协议支持的 25W 无线充电功能，需使用最新版 MagSafe 配件。iPhone 16e 暂不支持该功能。第三方配件目前最高仅能提供 15W 充电功率。
bkcrack: Crack legacy zip encryption
1 week 3 days ago
bkcrack Crack legacy zip encryption with Biham and Kocher’s known-plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a...
The post bkcrack: Crack legacy zip encryption appeared first on Penetration Testing Tools.
ddos
AzureGoat: Damn Vulnerable Azure Infrastructure
1 week 3 days ago
AzureGoat: A Damn Vulnerable Azure Infrastructure Compromising an organization’s cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an...
The post AzureGoat: Damn Vulnerable Azure Infrastructure appeared first on Penetration Testing Tools.
ddos
CVE-2023-52987 | Linux Kernel up to 6.1.10 ipc4-mtrace sof_ipc4_priority_mask_dfs_write data authenticity (WID-SEC-2025-0649)
1 week 3 days ago
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.1.10. This issue affects the function sof_ipc4_priority_mask_dfs_write of the component ipc4-mtrace. Performing manipulation results in insufficient verification of data authenticity.
This vulnerability is reported as CVE-2023-52987. The attacker must have access to the local network to execute the attack. No exploit exists.
It is suggested to upgrade the affected component.
vuldb.com
CVE-2023-52988 | Linux Kernel up to 6.1.10 add_secret_dac_path out-of-bounds (Nessus ID 240793 / WID-SEC-2025-0649)
1 week 3 days ago
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.1.10. This vulnerability affects the function add_secret_dac_path. Such manipulation leads to out-of-bounds read.
This vulnerability is documented as CVE-2023-52988. The attack requires being on the local network. There is not any exploit available.
The affected component should be upgraded.
vuldb.com
CVE-2023-52983 | Linux Kernel up to 5.15.92/6.1.10 bic_set_bfqq use after free (Nessus ID 247090 / WID-SEC-2025-0649)
1 week 3 days ago
A vulnerability categorized as critical has been discovered in Linux Kernel up to 5.15.92/6.1.10. This vulnerability affects the function bic_set_bfqq. The manipulation results in use after free.
This vulnerability is reported as CVE-2023-52983. The attacker must have access to the local network to execute the attack. No exploit exists.
It is advisable to upgrade the affected component.
vuldb.com