Aggregator

Как индустрия, которая обещала людям свободу, истощает нашу психику.

根据 Climate Action Tracker 的最新报告，到本世纪末全球气温预计将比工业化前水平上升 2.6C。世界各国在减排上仍然做得不够多，而与此同时化石燃料排放量今年将增长约 1% 创历史新高，虽然其增长速度过去几年已下降逾 50%。过去十年煤炭、石油和天然气的排放量每年增长 0.8%，而前十年则为每年 2.0%。可再生能源的加速部署已接近满足全球能源需求的年增长，但尚未超过。新的分析还显示，地球的天然碳汇正在减弱。科学家表示，全球暖化和树木砍伐的双重影响使东南亚和南美洲大部分地区的热带森林从二氧化碳的吸收源转变为排放源。报告预测 2025 年大气中的二氧化碳浓度将达到 425ppm，而工业化前为 280ppm。如果碳汇没有减弱，二氧化碳浓度应能降低 8ppm。

The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers to achieve arbitrary code execution. The vulnerability in question is CVE-2025-24893 (CVSS score: 9.8), an eval injection bug that could allow any guest user to perform arbitrary remote code execution through a request to the "/bin/get/Main/

Прибыль поставщиков микросхем взлетит вслед за новым прайс-листом.

Родители даже не подозревают, что игрушка способна открыть ребёнку мир взрослых и опасных желаний.

11月12日，一名因涉嫌黑客攻击而被美国通缉的俄罗斯公民在泰国被捕。

A vulnerability classified as critical was found in WeiYe-Jing datax-web up to 2.1.2. Affected is an unknown function. Executing manipulation can lead to sql injection. The identification of this vulnerability is CVE-2025-13251. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #687606 / VDB-332585

A vulnerability classified as critical has been found in WeiYe-Jing datax-web up to 2.1.2. This impacts the function remove/update/pause/start/triggerJob of the component Job Handler. Performing manipulation results in improper access controls. This vulnerability was named CVE-2025-13250. The attack may be initiated remotely. In addition, an exploit is available.

Submit #687605 / VDB-287277

Jaguar Land Rover (JLR) published its financial results for July 1 to September 30, warning that the cost of a recent cyberattack totaled £196 million ($220 million) in the quarter. [...]

Submit #687604 / VDB-332584

A vulnerability described as critical has been identified in Jiusi OA up to 20251102. This affects an unknown function of the file /OfficeServer?isAjaxDownloadTemplate=false of the component OfficeServer Interface. Such manipulation of the argument FileData leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2025-13249. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability marked as critical has been reported in SourceCodester Patients Waiting Area Queue Management System 1.0. The impacted element is an unknown function of the file /php/api_patient_schedule.php. This manipulation of the argument appointmentID causes sql injection. This vulnerability is handled as CVE-2025-13248. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability labeled as critical has been found in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. This vulnerability is known as CVE-2025-13247. It is possible to launch the attack remotely. Furthermore, an exploit is available.

История механизма, о котором никто не знал.

Submit #687599 / VDB-332583

Submit #687580 / VDB-332582

Submit #687578 / VDB-332581