Aggregator

A vulnerability, which was classified as critical, has been found in Squid Web Proxy up to 5.9/6.3. This issue affects some unknown processing of the component HTTP/ICAP. The manipulation leads to http request smuggling. The identification of this vulnerability is CVE-2023-46846. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Lana Downloads Manager Plugin up to 1.10.0 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation of the argument endpoint leads to cross site scripting. The identification of this vulnerability is CVE-2025-7387. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic was found in GoodLayers Hostel Plugin on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-6234. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in GoodLayers Hostel Plugin 1.1.5.8 on WordPress. Affected by this issue is some unknown functionality of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2025-6236. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

俄罗斯要求矿工登记矿机以打击逃税漏税行为，目前仅三成矿工纳税。监管机构编制综合注册表收集电力消耗和收益信息，并计划加强监管措施以提高合规性。

近日，微软官方发布了多个安全漏洞的公告，其中微软产品本身漏洞135个，影响到微软产品的其他厂商漏洞10个。

当前环境异常,需完成验证后才能继续访问。

文章通过图表分析了curl项目的漏洞情况，包括漏洞严重性分布、漏洞存在时间、C语言错误比例等，并展示了项目在测试和代码质量上的改进努力。

微软官方发布7月安全更新，请及时安装补丁修复。

当前环境异常，需完成验证后方可继续访问。

当前环境异常，需完成验证后方可继续访问。

当前环境异常，需完成验证后才能继续访问。

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.141/6.6.93/6.12.33/6.15.2/368ea32e0ad0335bdf3180067875a928e35387c6. This issue affects some unknown processing of the component phy. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2025-38275. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.93/6.12.33/6.15.2. This vulnerability affects the function fpga_mgr_test_img_load_sgt of the component fpga. The manipulation leads to null pointer dereference. This vulnerability was named CVE-2025-38274. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

这篇文章探讨了预训练数据中概念频率与零样本学习性能之间的关系，并通过使用RAM++模型和选择合适的阈值来评估图像中的概念频率。此外，作者还分析了不同预训练数据中图像-文本对的对齐情况。

A vulnerability classified as problematic has been found in Linux Kernel up to 6.15.2. This affects an unknown part of the component net. The manipulation leads to privilege escalation. This vulnerability is uniquely identified as CVE-2025-38272. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Island CEO Mike Fey on Drivers for SASE, Identity Features in Enterprise Browser
Island co-founder and CEO Mike Fey outlines how the enterprise browser is evolving through AI, SASE and hyperscaler investments to enhance governance, reduce backhaul traffic and support secure access across diverse industries such as healthcare and finance.

Phishing Emails Disguise Malware as Contract Files
A Russian cybersecurity company is warning that hackers are targeting Russia's industrial sector using a previously undocumented spyware, reeling them in with contract-themed emails lures. Kaspersky dubbed the spyware "Batavia." but doesn't attribute the campaign to a threat actor.