Aggregator

CVE-2025-13252 | shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a RSA/OAuth2/Database hard-coded credentials (EUVD-2025-197734)

VulDB Recent Entries
11 months 3 weeks ago
A vulnerability, which was classified as critical, was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. This vulnerability is identified as CVE-2025-13252. The attack can be executed remotely. Additionally, an exploit exists. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.
vuldb.com

CVE-2025-12482 | ameliabooking Booking for Appointments and Events Calendar Plugin sql injection (EUVD-2025-197716)

VulDB Recent Entries
11 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in ameliabooking Booking for Appointments and Events Calendar Plugin up to 1.2.35 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. This vulnerability is referenced as CVE-2025-12482. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

Weekly Update 478

Troy Hunt
11 months 3 weeks ago

This week, it was an absolute privilege to be at Europol in The Hague, speaking about cyber offenders and at the InterCOP conference and spending time with some of the folks involved in the Operation Endgame actions. The latter in particular gave me a new sense of just how much

Troy Hunt

從 React 中學習 JavaScript 底層運作

Huli's blog
11 months 3 weeks ago

前陣子去 JSDC 的線上前導活動分享了這個主題，想說既然都分享了，不如就寫篇文章好了。這篇文章的靈感來源以及內容其實都是來自於《JavaScript 重修就好》。當初寫書的時候就有參考 React 原始碼中的一些東西，這篇只是把原本分散在書中的各個 React 相關章節整理起來重寫一遍。

我覺得從這些開源專案的程式碼中學一些新的概念滿有趣的，畢竟這些很多人用的框架通常碰過的 bug 也越多，學到這些問題的解法以後，也可以再回去反思以前自己學過的東西。

這篇分成三個小章節：

  1. React 舊版的 XSS
  2. 從 React Fiber 學習 event loop
  3. 從 V8 bug 學習底層運作

開頭先聲明一下，雖然標題叫做「從 React 中學習 JavaScript 底層運作」，只有最後一個比較底層，第一個更是與底層沒什麼關係。只是我沒想到比這個更好的標題，因此就用這個了。

Huli

Anthropic: China-backed hackers launch first large-scale autonomous AI cyberattack

Security Affairs
11 months 3 weeks ago
China-linked actors used Anthropic’s AI to automate and run cyberattacks in a sophisticated 2025 espionage campaign using advanced agentic tools. China-linked threat actors used Anthropic’s AI to automate and execute cyberattacks in a highly sophisticated espionage campaign in September 2025. The cyber spies leveraged advanced “agentic” capabilities rather than using AI only for guidance. Attackers […]
Pierluigi Paganini

AI攻防 Gemini大模型越狱提示词

K8哥哥’s Blog
11 months 3 weeks ago
AI越狱用途与风险 用途（合法与常见场景）
  • 研究与安全测试：评估模型对对抗输入的鲁棒性、发现并修复偏差或漏洞。
  • 模型能力扩展：在受控环境下测试模
K8gege

Managed ad