Aggregator

A vulnerability classified as critical has been found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file exam_save.php. The manipulation of the argument member/first leads to sql injection. This vulnerability is traded as CVE-2025-29425. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in metal3-io baremetal-operator up to 0.8.0/0.9.0. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2025-29781. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in NASA CryptoLib up to 1.3.3. It has been declared as very critical. This vulnerability affects the function Crypto_TC_ProcessSecurity. The manipulation of the argument fl leads to heap-based buffer overflow. This vulnerability was named CVE-2025-29912. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in N-able N-central 2023.4/2023.6/2024.2/2024.3. It has been classified as critical. This affects an unknown part of the component Apache Tomcat WEB-INF Directory. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2024-8510. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

GB/T 22240-2020 《信息安全技术 网络安全等级保护定级指南》，于2020年11月1日起正式实施。下面将对定级指南中的内容进行详细解读。

In this Help Net Security interview, Sunil Mallik, CISO of Discover Financial Services, discusses cybersecurity threats for financial institutions. He also shares insights on balancing compliance with agility, lessons from regulatory audits, and Discover’s approach to risk management and workforce development. What are the most pressing security threats facing credit card and digital banking platforms, and how should organizations adapt defenses to counter them? The most pressing security threats facing credit card companies and digital … More →

The post How financial institutions can minimize their attack surface appeared first on Help Net Security.

锦行科技已连续两年担当 “长城杯” 铁人三项赛（广东赛区）的协办单位，在赛事的发展历程中留下了深刻印记。

论文报告、学术碰撞与海滨美景，一场难忘的安全研究之旅！

论文报告、学术碰撞与海滨美景，一场难忘的安全研究之旅！

论文报告、学术碰撞与海滨美景，一场难忘的安全研究之旅！

锦行科技已连续两年担当 “长城杯” 铁人三项赛（广东赛区）的协办单位，在赛事的发展历程中留下了深刻印记。

锦行科技已连续两年担当 “长城杯” 铁人三项赛（广东赛区）的协办单位，在赛事的发展历程中留下了深刻印记。

论文报告、学术碰撞与海滨美景，一场难忘的安全研究之旅！

锦行科技已连续两年担当 “长城杯” 铁人三项赛（广东赛区）的协办单位，在赛事的发展历程中留下了深刻印记。

锦行科技已连续两年担当 “长城杯” 铁人三项赛（广东赛区）的协办单位，在赛事的发展历程中留下了深刻印记。

锦行科技已连续两年担当 “长城杯” 铁人三项赛（广东赛区）的协办单位，在赛事的发展历程中留下了深刻印记。

论文报告、学术碰撞与海滨美景，一场难忘的安全研究之旅！

锦行科技已连续两年担当 “长城杯” 铁人三项赛（广东赛区）的协办单位，在赛事的发展历程中留下了深刻印记。

论文报告、学术碰撞与海滨美景，一场难忘的安全研究之旅！

论文报告、学术碰撞与海滨美景，一场难忘的安全研究之旅！