Aggregator

该项目会读取本地敏感信息并将私钥上传至黑客服务器。

A vulnerability, which was classified as problematic, has been found in WP Shortcodes Plugin up to 7.4.2 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2025-7369. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in MB Connect Line mbNET.mini up to 2.3.2. Affected by this vulnerability is an unknown functionality of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2025-41681. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

💪 💪

A vulnerability classified as critical has been found in MB Connect Line mbNET.mini up to 2.3.2. Affected is an unknown function of the component Configuration Database Handler. The manipulation leads to sql injection. This vulnerability is traded as CVE-2025-41678. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MB Connect Line mbNET.mini up to 2.3.2. It has been rated as problematic. This issue affects some unknown processing of the component HTTP POST Request Handler. The manipulation leads to resource consumption. The identification of this vulnerability is CVE-2025-41677. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MB Connect Line mbNET.mini up to 2.3.2. It has been declared as problematic. This vulnerability affects unknown code of the component HTTP POST Request Handler. The manipulation leads to resource consumption. This vulnerability was named CVE-2025-41676. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MB Connect Line mbNET.mini up to 2.3.2. It has been classified as critical. This affects an unknown part of the component Conftool. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2025-41679. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MB Connect Line mbNET.mini up to 2.3.2 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to os command injection. This vulnerability is handled as CVE-2025-41675. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

AI 最大的作用，不是和你沟通，而是帮你和自己沟通。

A vulnerability has been found in MB Connect Line mbNET.mini up to 2.3.2 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to os command injection. This vulnerability is known as CVE-2025-41674. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in MB Connect Line mbNET.mini up to 2.3.2. Affected is the function send_sms. The manipulation leads to os command injection. This vulnerability is traded as CVE-2025-41673. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS up to 5.202506.a. This issue affects some unknown processing of the file publiccms-parent/publiccms/src/main/webapp/resource/plugins/pdfjs/viewer.html. The manipulation of the argument File leads to open redirect. The identification of this vulnerability is CVE-2025-7953. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

On-prem SharePoint customers have been told to assume compromise, with attackers observed to be exfiltrating data from victim servers across critical sectors

学习如何分析题目+解决题目

升级避风险

看雪论坛作者ID：flyyyy

AI Agent的引入，标志着企业知识管理从被动查询迈入主动服务、智能执行的新阶段！

Submit #619279 / VDB-317099