Aggregator

Submit #588843 / VDB-311089

Submit #588842 / VDB-311088

速修复

速修复

IBM has issued a security bulletin highlighting multiple vulnerabilities in its QRadar Suite Software and Cloud Pak for Security platforms. The flaws, which range from medium to critical severity, could enable attackers to compromise sensitive data, execute arbitrary code, or disrupt service operations. Security experts and IBM strongly recommend that all affected organizations upgrade to […]

The post IBM QRadar Vulnerabilities Expose Sensitive Configuration Files to Attackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

The Wireshark Foundation has officially launched the Wireshark Certified Analyst (WCA-101) certification, marking a significant milestone for IT professionals and network engineers worldwide. Designed by Wireshark’s developers and leading protocol experts, the WCA-101 exam is tailored to validate advanced proficiency in network protocol analysis and real-world troubleshooting using Wireshark, the industry-standard network protocol analyzer. Wireshark, […]

The post Wireshark Certified Analyst – Wireshark Released Official Certification for Security Professionals appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

本文针对加密与规避技术日益复杂所带来的恶意流量检测难题，提出了一种基于图结构的网络行为建模方法——ST-Graph。

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument LangType leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2025-5600. The attack may be initiated remotely. Furthermore, there is an exploit available.

Фейковые трейдерши атакуют россиян.

Submit #588075 / VDB-311087

A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the argument emp1ctc leads to sql injection. This vulnerability was named CVE-2025-5599. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #588033 / VDB-295137

Submit #587996 / VDB-191307

A vulnerability classified as critical has been found in Delta Electronics CNCSoft-G2 2.0.0.5/2.1.0.4/2.1.0.10/2.1.0.20. This affects an unknown part of the component File Handler. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2025-47728. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in ABB EIBPORT V3 KNX and EIBPORT V3 KNX GSM up to 3.9.8. It has been rated as critical. Affected by this issue is some unknown functionality of the component Integrated Web Server. The manipulation leads to session fixiation. This vulnerability is handled as CVE-2024-13967. The attack may be launched remotely. There is no exploit available.

Submit #587980 / VDB-148416

Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency wallets, erase entire codebases after installation, and exfiltrate Telegram API tokens, once again demonstrating the variety of supply chain threats lurking in open-source ecosystems. The findings come from multiple reports published by Checkmarx,

Submit #587966 / VDB-187467

Submit #587960 / VDB-311086

本文将介绍典型的无限制 LLM 工具及其滥用方式。