Aggregator

出海浪潮下的安全挑战 在全球化进程不断加速的当下，中国企业出海的步伐愈发坚定。无论是互联网科技企业拓展

协奏成章

A vulnerability has been found in Springsignage Xibo 1.4.2 and classified as problematic. This vulnerability affects unknown code of the file index.php. The manipulation of the argument layout leads to cross site scripting. This vulnerability was named CVE-2013-4888. The attack can be initiated remotely. Furthermore, there is an exploit available.

AutoPentest-DRL is an automated penetration testing framework based on Deep Reinforcement Learning (DRL) techniques. The framework determines the most appropriate attack path for a given network and can be used to execute a simulated...

The post AutoPentest-DRL: Automated Penetration Testing Using Deep Reinforcement Learning appeared first on Penetration Testing Tools.

美媒：科技与金融界知名人士组团赴海湖庄园，欲就关税问题与特朗普「讨论常识」； Meta 新旗舰 AI 模型 Llama 4 Maverick 测试成绩遭质疑，被指针对性优化； 摩根士丹利预测：苹果手机价格或飙升，美关税政策重创苹果公司供应链

A vulnerability, which was classified as problematic, was found in Language Translate Widget Plugin up to 223 on WordPress. This affects an unknown part. The manipulation of the argument api_key leads to cross site scripting. This vulnerability is uniquely identified as CVE-2023-6811. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Leantime 3.0.6. Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2024-27474. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Savignano SNotify up to 2.0.0. This affects an unknown part of the component User Profile Page. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2024-23734. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Patchwork APT组织最新Spyder后门样本分析

3月│月报 谛听工控安全月报上线了，工信部的最新政策，3月发生的多起工控安全事件，谛听团队收集的最新攻击教据......更多安全资讯，请关注“谛听ditecting",每月更新!

3月│月报 谛听工控安全月报上线了，工信部的最新政策，3月发生的多起工控安全事件，谛听团队收集的最新攻击教据......更多安全资讯，请关注“谛听ditecting",每月更新!

Name: PlaidCTF 2025 (an PlaidCTF event.)
Date: April 4, 2025, 9 p.m. — 06 April 2025, 21:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://plaidctf.com/
Rating weight: 100.00
Event organizers: Plaid Parliament of Pwning

From quantum leaps to AI factories, GTC 2025 proved one thing: the future runs on secure foundations.

GreyNoise has observed a significant spike in exploitation attempts against TVT NVMS9000 DVRs. This information disclosure vulnerability can be used to gain administrative control over affected systems. 

Apache Tomcat 11.0.3 - Remote Code Execution

YesWiki 4.5.1 - Unauthenticated Path Traversal

XWiki Platform 15.10.10 - Remote Code Execution

基于云计算技术理念的超融合系统，帮助制造企业实现提质增效。

原红三军团政委，红一方面军副总政委，中央军委参谋长，八路军前方总部参谋长，铁道部部长，全国政协副主席

原红三军团政委，红一方面军副总政委，中央军委参谋长，八路军前方总部参谋长，铁道部部长，全国政协副主席