Aggregator

A vulnerability was found in FicHive 1.0 and classified as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument letter leads to sql injection. The identification of this vulnerability is CVE-2008-2425. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in X.org X11 Server. It has been rated as critical. Affected by this issue is some unknown functionality of the component TigerVNC. The manipulation leads to improper locking. This vulnerability is handled as CVE-2025-49178. Attacking locally is a requirement. There is no exploit available.

Номер телефона стал электронным паспортом с пожизненной пропиской.

A vulnerability was found in Microsoft SQL Server 7.0/2000. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Extended Stored Procedure. The manipulation leads to improper privilege management. This vulnerability is known as CVE-2002-0721. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

美好的时代总要过去。在 Ubuntu 之后 Kubuntu 发行版也决定移除对 X11 的默认支持，理由也差不多，为下一个长期支持版 Kubuntu 26.04 做准备。Kubuntu 25.10 是 26.04 前的一个过渡版本，让 25.10 和 26.04 保持一致有助于减少碎片化，让开发者和用户有更多时间准备和适应。Kubuntu 使用 KDE Plasma 桌面环境，和 GNOME 桌面环境项目情况相似，KDE 开发者明确表示未来的注意力将集中在 Wayland 上，X11 会继续维护直至其消失。KDE 开发者 Nate Graham 表示，X11 上的严重 bug 他们会去修复，但不严重的 bug 他们可能就放着不理了，除非有人付费给他们。Plasma 桌面目前还没有移除 X11 的明确时间表。

A vulnerability was found in MojoBlog Rc0.15. It has been classified as critical. This affects an unknown part of the file wp-comments-post.php. The manipulation of the argument mosConfig_absolute_path leads to code injection. This vulnerability is uniquely identified as CVE-2009-4789. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Microsoft Internet Explorer 6/7/8/9/10. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2013-3166. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Cato CTRL has discovered previously unreported WormGPT variants, but with a twist — they are powered by xAI’s Grok and Mistral AI’s Mixtral.   

The post WormGPT Variants Powered by Grok and Mixtral Have Emerged  appeared first on Security Boulevard.

Microsoft has rolled out a significant update to its popular Snipping Tool, introducing the ability to export screen recordings as animated GIFs—a feature long requested by users and now available to Windows 11 Insiders in the Canary and Dev Channels. This enhancement, part of Snipping Tool version 11.2505.21.0, aims to streamline the process of creating […]

The post Windows Snipping Tool Now Lets Users Export Captures as GIFs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Ваши представления о киберпреступниках устарели. Теперь это бизнес с юристами, журналистами и службой клиентской поддержки.

A vulnerability, which was classified as critical, was found in Genetechsolutions Pie Register up to 2.0.12. This affects an unknown part of the file pie-register.php of the component User Account. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2014-8802. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

70 Luchtmobiele militairen zijn onderweg van Irak naar Nederland. Ze zijn nu in Jordanië en vliegen naar verwachting later vandaag met een civiel vliegtuig verder. Eigenlijk stond de terugkomst een paar dagen geleden op de planning. Dat ging niet door, omdat het luchtruim boven Irak dicht was vanwege oplopende spanningen tussen Israël en Iran.

A vulnerability, which was classified as critical, has been found in WP GPX Maps Plugin 1.1.21 on WordPress. This issue affects some unknown processing. The manipulation leads to unrestricted upload. The identification of this vulnerability is CVE-2012-6649. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

某歌邮箱注册参数f.req 还原过程。trace不说了，试试自实现反编译器还原VMP吧！

Зрители до последнего не понимали, что случилось с телеэфиром.

A vulnerability has been found in Oracle Financial Services Analytical Applications Reconciliation Framework 8.0.4/8.0.5/8.0.6/8.0.7 and classified as critical. This vulnerability affects unknown code of the component jQuery. The manipulation leads to cross site scripting. This vulnerability was named CVE-2019-11358. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in FAR-PHP 1.00. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation leads to path traversal. This vulnerability is known as CVE-2008-4741. The attack can be launched remotely. Furthermore, there is an exploit available.

当下，域名不仅仅是企业互联网基础设施的基石，支撑着互联网服务的稳定与安全，更是品牌认知放大器，决定了用户的第一

儿童肥胖已成为全球公共卫生危机，而食品广告被认为是重要的环境驱动因素。最新证据显示，儿童每天接触的食品广告中超过 90% 推广的是高脂高糖产品，其中数字营销通过社交媒体、游戏平台等渠道实现精准投放，每小时可达 17.4 次曝光。这种暴露不仅改变饮食行为，更通过激活大脑奖赏系统（如杏仁核和前额叶皮层）形成持久影响。全球监测数据显示，儿童电视频道中 23% 的广告涉及食品，且不健康产品占比高达健康食品的 4 倍。数字时代带来新挑战：墨西哥青少年45分钟屏幕记录显示 69.5% 接触食品广告，每周中位数达 47.3 次；澳大利亚研究推算青少年每周接触 168.4 次数字食品广告，其中 99.5% 不符合 WHO 营养标准。食品品牌采用"健康洗白"（health-washing）和"绿色伪装"（green-washing）等策略增强吸引力。TikTok 营销中 87% 视频使用品牌标识，25% 启用网红代言；Instagram 广告通过青少年流行语和明亮色彩实现精准触达。值得注意的是，参与互动（点赞/分享）会放大广告效应，美国 70% 青少年主动参与食品品牌社交互动，形成"非官方品牌大使"现象。荟萃分析证实，食品广告暴露使儿童即时能量摄入增加 57.7kcal，接近导致体重增长的每日能量差（110-165kcal）。神经影像研究显示，不健康食品广告比健康食品引发更强的脑区激活。

本次交流会由广东省高等教育学会、中国信息安全漏洞库漏洞技术研究联盟秘书长单位-广东省网络空间安全产业创新联合会联合主办，中国信息安全漏洞库漏洞技术研究联盟常务副秘书长单位-广州锦行网络科技有限公司承办。