Aggregator

AI攻防战已然打响

为企业智能化转型提供“首选答案”

关键词数据泄露美国以色列公共事务委员会（AIPAC）近日向缅因州司法部长办公室披露了一起数据泄露事件。

关键词DoorDashDoorDash 再次陷入数据泄露事件之中，这一次的起因是一名员工遭遇社交工程攻击，导致

关键词网络攻击美国司法部近日公布，五名个人已就协助朝鲜规避国际制裁、帮助其海外 IT 劳工渗透美国企业的犯罪行

关键词三星三星近期在多个国家遭遇隐私争议，被指在部分 Galaxy A 系列与 M 系列等中低端机型中预装名为

North Korean Contagious Interview actors now host malware on JSON storage sites to deliver trojanized code projects, NVISO reports. North Korea-linked actors behind the Contagious Interview campaign have updated their tactics, using JSON storage services (e.g. JSON Keeper, JSONsilo, and npoint.io) to host and deliver malware through trojanized code projects, according to a new NVISO report. “NVISO […]

Пит Хегсет удаленно пилотировал Black Hawk. Пилоты были на борту для страховки.

A vulnerability was found in Campcodes School Fees Payment Management System 1.0. It has been rated as critical. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. This vulnerability is registered as CVE-2025-13271. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability categorized as critical has been discovered in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /manage_course.php. Such manipulation of the argument ID leads to sql injection. This vulnerability is documented as CVE-2025-13272. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability identified as critical has been detected in Campcodes School Fees Payment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_payment. Performing manipulation of the argument ID results in sql injection. This vulnerability is reported as CVE-2025-13273. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability labeled as critical has been found in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_fees. Executing manipulation of the argument ID can lead to sql injection. This vulnerability appears as CVE-2025-13274. The attack may be performed from remote. In addition, an exploit is available.

并非所有框架均已修复

速修复

A vulnerability categorized as problematic has been discovered in OpenBSD 7.2. Affected by this issue is the function tcp_input of the file tcp_input.c of the component TCP Packet Handler. The manipulation results in denial of service. This vulnerability is known as CVE-2023-27567. It is possible to launch the attack remotely. No exploit is available. It is advisable to implement a patch to correct this issue.

A vulnerability, which was classified as critical, has been found in Live2D Cubism Editor 4.2.03. This affects an unknown function of the component MOC3 File Handler. This manipulation causes out-of-bounds write. This vulnerability is tracked as CVE-2023-27566. The attack is restricted to local execution. No exploit exists.

A vulnerability marked as problematic has been reported in Jupiter 1.3.1. This issue affects some unknown processing of the component RPC Request Handler. The manipulation leads to deserialization. This vulnerability is referenced as CVE-2023-48887. The attack needs to be initiated within the local network. Furthermore, an exploit is available. It is suggested to upgrade the affected component.

A vulnerability categorized as critical has been discovered in cURL up to 7.x. Affected is an unknown function of the file /~2/foo of the component SFTP. The manipulation results in path traversal. This vulnerability is reported as CVE-2023-27534. The attacker must have access to the local network to execute the attack. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Oracle Hyperion Infrastructure Technology 11.2.14.0.000. Affected by this vulnerability is an unknown functionality of the component Infrastructure. The manipulation results in path traversal. This vulnerability was named CVE-2023-27534. The attack may be performed from remote. There is no available exploit.

The U.S. Justice Department announced major actions against North Korean cybercrime, including five people admitting guilt and the government taking more than $15 million in property linked to the crimes. These operations reveal how the Democratic People’s Republic of Korea (DPRK) uses fraudulent IT workers and cryptocurrency heists to fund its weapons programs while evading […]

The post North Korean Hackers Infiltrated 136 U.S. Companies to Generate $2.2 Million in Revenue appeared first on Cyber Security News.