Aggregator

Submit #616344 / VDB-316856

Submit #616318 / VDB-316855

Submit #616317 / VDB-316854

Submit #616316 / VDB-316853

VMware patched flaws disclosed during the Pwn2Own Berlin 2025 hacking contest, where researchers earned $340,000 for exploiting them. Broadcom four vulnerabilities in VMware products demonstrated at Pwn2Own Berlin 2025. White hat hackers earned over $340,000 for VMware exploits, including $150,000 awarded to STARLabs SG for using an integer overflow flaw to compromise VMware ESXi. Below […]

Submit #616314 / VDB-177394

Submit #616312 / VDB-177395

Submit #616311 / VDB-177389

网络钓鱼攻击日益复杂，利用AI和深度伪造技术更具欺骗性。研究显示53%员工虽自信识别钓鱼邮件，但实际失败率高。持续安全教育和零信任文化是应对关键。

A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of the argument searchdata leads to cross site scripting. This vulnerability was named CVE-2025-7791. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #616242 / VDB-168885

文章探讨了电视信号中断的奇怪现象,解释了黑客如何通过技术手段干扰正常广播,并分析了有线与卫星电视的区别及背后动机,帮助读者理解这一现象的基本原理和原因。

Submit #616240 / VDB-168885

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. This affects an unknown part of the file /menu_nat.asp of the component HTTP Request Handler. The manipulation of the argument out_addr/in_addr/out_port/proto leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2025-7790. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Submit #616217 / VDB-316852

A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the function makeToken of the file src/main/java/com/xxl/job/admin/controller/IndexController.java of the component Token Generation. The manipulation leads to password hash with insufficient computational effort. This vulnerability is handled as CVE-2025-7789. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical. Affected by this vulnerability is the function commandJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to os command injection. This vulnerability is known as CVE-2025-7788. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. This vulnerability is traded as CVE-2025-7787. It is possible to launch the attack remotely. Furthermore, there is an exploit available.