Aggregator

GhostEyes: Next-Gen Reconnaissance Toolkit for Red Teams & Pentesters

比利时布鲁塞尔商事法庭发布了一份禁令，旨在限制对影子图书馆的访问，受影响的网站包括安娜的档案 (Anna's Archive)、Libgen、OceanofPDF、Z-Library 以及互联网档案馆的 Open Library。除了 ISP，搜索引擎、DNS 解析器、广告商、域名服务商、内容分发网络 (CDN) 和托管商都需要采取行动限制对上述网站的访问。Open Library 由已故的 Aaron Swartz 和互联网档案馆创始人 Brewster Kahle 等人创办，旨在存档所有已出版书籍，允许读者在线借阅。与其它电子图书馆类似，它的每本书每次只能借出一份拷贝。但不同之处是它的电子书没有获得授权，而是通过自己扫描去创建电子版。

今日暂未更新资讯~
更多最新文章，请访问SecWiki

A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.caixin.news. The manipulation leads to improper export of android application components. This vulnerability is traded as CVE-2025-8513. Local access is required to approach this attack. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component hk.com.tvb.bigbigshop. The manipulation leads to improper export of android application components. The identification of this vulnerability is CVE-2025-8512. An attack has to be approached locally. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #619029 / VDB-318612

5份文件均讨论了中央情报局的行动与影响，重点概述了中央情报局的情报工作、外交政策影响、阿富汗的军事行动、情报行动中使用记者和神职人员以及选举干预。

Submit #619028 / VDB-318611

A vulnerability classified as problematic was found in Portabilis i-Diario 1.5.0. This vulnerability affects unknown code of the file /diario-de-observacoes/ of the component Observações. The manipulation of the argument Descrição leads to cross site scripting. This vulnerability was named CVE-2025-8511. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. This affects the function Gerar of the file ieducar/intranet/educar_matricula_lst.php. The manipulation of the argument ref_cod_aluno leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-8510. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue. The vendor initially closed the original advisory without requesting a CVE.

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educar_servidor_cad.php. The manipulation of the argument matricula leads to cross site scripting. This vulnerability is handled as CVE-2025-8509. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Portabilis i-Educar 2.9. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /intranet/educar_avaliacao_desempenho_cad.php. The manipulation of the argument titulo_avaliacao/descricao leads to cross site scripting. This vulnerability is known as CVE-2025-8508. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in Portabilis i-Educar 2.9. It has been classified as problematic. Affected is an unknown function of the file /intranet/educar_funcao_lst.php. The manipulation of the argument nm_funcao/abreviatura leads to cross site scripting. This vulnerability is traded as CVE-2025-8507. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Пока США запрещали, Китай уже штампует ИИ-ускорители из обычных RTX 5090.

Submit #618973 / VDB-318610

Submit #618964 / VDB-318609

Submit #618679 / VDB-318608

Submit #618678 / VDB-318607

Submit #618677 / VDB-318606

A vulnerability has been found in net-snmp up to 5.7.2 on Linux and classified as problematic. Affected by this vulnerability is the function decode_icmp_msg of the file /proc/net/snmp of the component ICMP-MIB Table Object Handler. The manipulation leads to improper input validation. This vulnerability is known as CVE-2014-2284. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.