Aggregator

A vulnerability has been found in Tenda AC21 16.03.08.16 and classified as critical. Impacted is an unknown function of the file /goform/saveParentControlInfo. Performing manipulation of the argument urls results in buffer overflow. This vulnerability was named CVE-2025-65223. The attack may be initiated remotely. There is no available exploit.

A vulnerability, which was classified as critical, was found in Tenda AC21 16.03.08.16. This issue affects some unknown processing of the file /goform/SetSysAutoRebbotCfg. Such manipulation of the argument rebootTime leads to buffer overflow. This vulnerability is uniquely identified as CVE-2025-65222. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as critical, has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/setPptpUserList. This manipulation of the argument list causes buffer overflow. This vulnerability is handled as CVE-2025-65221. The attack can be initiated remotely. There is not any exploit available.

A vulnerability classified as critical was found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/saveParentControlInfo. The manipulation of the argument deviceId results in buffer overflow. This vulnerability is known as CVE-2025-65226. Access to the local network is required for this attack. No exploit is available.

A vulnerability classified as problematic has been found in Narkom Pyxis Signage up to 31012025. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-0643. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability described as problematic has been identified in phpPgAdmin up to 7.13.0. Affected by this vulnerability is an unknown functionality of the file sequences.php. Executing manipulation can lead to cross site scripting. This vulnerability appears as CVE-2025-60796. The attack may be performed from remote. There is no available exploit.

A vulnerability marked as problematic has been reported in phpPgAdmin up to 7.13.0. Affected is an unknown function of the file sql.php. Performing manipulation of the argument sqlquery results in cross site scripting. This vulnerability is reported as CVE-2025-60799. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as problematic has been found in couch-auth up to 0.21.2. This impacts an unknown function of the file src/user.ts. Such manipulation leads to information disclosure. This vulnerability is documented as CVE-2025-60794. The attack needs to be performed locally. There is not any exploit available.

A vulnerability identified as critical has been detected in Narkom Pyxis Signage up to 31012025. This affects an unknown function. This manipulation causes unrestricted upload. This vulnerability is registered as CVE-2025-0645. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as critical has been discovered in phpPgAdmin up to 7.13.0. The impacted element is the function browseQuery of the file display.php. The manipulation of the argument Query results in sql injection. This vulnerability is cataloged as CVE-2025-60798. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in phpPgAdmin up to 7.13.0. It has been rated as critical. The affected element is an unknown function of the file dataexport.php. The manipulation of the argument Query leads to sql injection. This vulnerability is listed as CVE-2025-60797. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Ilevia EVE X1 Server up to 6.00 2025_07_21. It has been declared as critical. Impacted is an unknown function of the file ping.php. Executing manipulation can lead to privilege escalation. This vulnerability is tracked as CVE-2025-60738. The attack can be launched remotely. No exploit exists.

There is a serious security problem inside Comet, the AI-powered agentic browser made by Perplexity, SquareX researchers say: Comet’s MCP API allows the browser’s built-in (but hidden from the user) extensions to issue commands directly to a user’s device, and the capability can be leveraged by attackers. Comet can run applications, read files and modify data on the local system. “Old-school” browsers normally block this level of access, but (some) AI-powered browsers are effectively braking … More →

The post Security gap in Perplexity’s Comet browser exposed users to system-level attacks appeared first on Help Net Security.

D-Link is warning of three remotely exploitable command execution vulnerabilities that affect all models and hardware revisions of its DIR-878 router, which has reached end-of-service but is still available in several markets. [...]

《自然》期刊发表的一篇论文发现，人脑对熟悉和陌生语言的声音会有相似的反应。这一研究结果实证了语音感知的跨语言共性，有助于人们理解大脑如何处理语音，并有望指导今后的语言学习和康复的方式。所有口语都有一些相同的声学-语音特征，如元音和辅音，但这些声音组合成词的方式却各不相同。此前研究发现，大脑颞上回区域在语音感知中起到关键作用，但并不清楚颞上回处理熟悉和陌生语言的方式是否一致。中美科学家招募了 34 名讲西班牙语、英语或普通话的受试者，并在他们聆听母语语句和陌生外语语句时记录了他们的脑活动。研究人员发现，此次研究的大部分脑活动都来自颞上回，而且对于熟悉和陌生语言具有相似性。不过，在听到一种已知语言时，脑信号对于词汇相关特征的反应会增强，如词边界(词头和词尾)和词频。在讲西英双语的受试者中，这些信号对两种语言都会增强。研究结果表明，虽然大脑处理不同语言的基本语音的方式相同，但经验能将这些语音组合成词。这或许能解释为何学一种新语言很难：不仅要听辨声音，还要学会如何组合它们。

Устройство размером с кристаллик соли работает как биологический Wi-Fi.

Что на самом деле случилось с сайтом Xubuntu в октябре.

Windows 11 migration is inevitable as Windows 10 support ends, and unsupported systems create major security and ransomware risks. Acronis explains how to use this migration to review backups, strengthen cybersecurity, and ensure data stays recoverable. [...]

From secure service mesh rollouts to AI cluster hardening, see how KubeCon + CloudNativeCon NA 2025 redefined identity, trust, and governance in Kubernetes environments.

The post Trust Beyond Containers: Identity and Agent Security Lessons from KubeCon 2025 appeared first on Security Boulevard.