Aggregator

高通收购开源硬件公司 Arduino 并推出搭载其芯片的新品 Uno Q，旨在扩大边缘计算市场份额。

A vulnerability identified as problematic has been detected in Opexus FOIAXpress 11.1.0/11.12.3.0/11.13.1.0. Affected by this issue is some unknown functionality of the component SVG Image Logo Handler. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2025-61999. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Opexus FOIAXpress 11.1.0/11.12.3.0/11.13.1.0. Affected by this vulnerability is an unknown functionality of the component Technical Support Hyperlink Manager. Executing manipulation can lead to cross site scripting. This vulnerability is registered as CVE-2025-61998. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in Opexus FOIAXpress 11.1.0/11.12.3.0/11.13.1.0. It has been rated as problematic. Affected is an unknown function of the component Annual Report Enterprise Banner Image Handler. Performing manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2025-61997. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in Opexus FOIAXpress 11.1.0/11.12.3.0/11.13.1.0. It has been declared as problematic. This impacts an unknown function of the component Annual Report Template Handler. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2025-61996. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability was found in CompuGroup Medical CGM MEDICOI up to 29.0. It has been classified as problematic. This affects an unknown function of the component DNET Handler. This manipulation causes cryptographic issues. This vulnerability is tracked as CVE-2025-48981. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in denoland Deno up to 2.2.14/2.5.2 on Windows and classified as critical. The impacted element is the function CreateProcess of the file cmd.exe of the component Command Line Handler. The manipulation results in command injection. This vulnerability is identified as CVE-2025-61787. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in denoland Deno up to 2.2.14/2.5.2 and classified as critical. The affected element is the function Deno.FsFile.prototype.stat/Deno.FsFile.prototype.statSync. The manipulation leads to improper privilege management. This vulnerability is referenced as CVE-2025-61786. The attack can only be performed from a local environment. No exploit is available. The affected component should be upgraded.

A vulnerability, which was classified as problematic, was found in denoland Deno up to 2.2.14/2.5.2. Impacted is the function Deno.FsFile.prototype.utime/Deno.FsFile.prototype.utimeSync. Executing manipulation can lead to incorrect privilege assignment. The identification of this vulnerability is CVE-2025-61785. The attack can only be executed locally. There is no exploit available. You should upgrade the affected component.

A vulnerability was found in Netscape Fasttrack Server 4.1. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component Caching Module. This manipulation causes denial of service. This vulnerability is registered as CVE-2001-0175. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability was found in Microsoft IIS 5.0. It has been declared as problematic. Affected is an unknown function of the component WebDAV Request Handler. Executing manipulation can lead to denial of service. This vulnerability appears as CVE-2001-0151. The attack may be performed from remote. In addition, an exploit is available. It is advisable to implement a patch to correct this issue.

A vulnerability identified as problematic has been detected in Webmaster ConferenceRoom 1.8.1. This affects an unknown part of the component Buddy Relationship Handler. Performing manipulation results in denial of service. This vulnerability is reported as CVE-2001-0177. The attack is possible to be carried out remotely. Moreover, an exploit is present. You should upgrade the affected component.

这是一个基于Cloudflare Workers的博客程序,使用KV存储作为数据库,兼具静态与动态博客优势,支持Markdown后台、一键发布及缓存优化,提供详细部署指南及第三方评论集成.

When disaster strikes, communication often fails. Cell towers can go offline, internet connections can disappear, and people are left without a way to share information or ask for help. A new research project looks at how to keep people talking even when regular networks are gone. Researchers from the University of Zürich and the University of St. Gallen have developed a system that combines low-power radios with a smartphone app. It is designed for situations … More →

The post New system aims to keep people connected when networks fail appeared first on Help Net Security.

Споры микроорганизмов впервые пережили адские перегрузки космического полёта.

微软在Windows 11的OOBE阶段删除了绕过登录的选项，要求所有用户必须使用在线账户完成配置。此举旨在确保设备正确设置，避免部分配置缺失。用户仍可创建本地账户，但需先登录在线账户。

A vulnerability labeled as critical has been found in Linux Kernel up to 5.12.1. This affects an unknown function of the component NFC Socket Handler. The manipulation results in use after free. This vulnerability is identified as CVE-2021-23134. The attack is only possible with local access. There is not any exploit available. The affected component should be upgraded.

Currently trending CVE - Hype Score: 1 - In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket to buffer up the whole record before we service it. If the socket has a tiny buffer, however, we read out the data ...

富士電機製V-SFTには複数の脆弱性が存在します。