Aggregator

31 位普通人，给一只背包开出了成绩单

不安全
1 month ago
写在前面一只背包，能不能让你体面地背去客户的会议室，也能陪你参加朋友聚会？装下两三天的差旅行李之后，它还能让你背得轻松吗？当包里同时塞着笔记本、平板和各种重设备，容量、舒适与防护，究竟能不能兼得？带着

Cisco SD-WAN 0-day exploited, no patch available (CVE-2026-20245)

Help Net Security
1 month ago

A 0-day privilege escalation vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager that has yet to be patched by Cisco is being leveraged by attackers. “To exploit this vulnerability, an attacker must have netadmin privileges on an affected system. This would require valid credentials or exploitation of CVE-2026-20182 or CVE-2026-20127. Cisco is not aware of successful exploitation by other methods,” the company shared on Thursday. It also said that it has observed “limited cases where the … More →

The post Cisco SD-WAN 0-day exploited, no patch available (CVE-2026-20245) appeared first on Help Net Security.

Zeljka Zorz

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

The Hackers News
1 month ago
Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, leading to a complete site compromise. The vulnerability in question is CVE-2026-3300 (CVSS score: 9.8), a remote code execution bug impacting all versions of the plugin up to, and including, 1.9.12. A patch for the flaw was
The Hacker News

Google 寻求在加州和佛州释放数千万只无生育能力的雄蚊

Solidot
1 month ago
Google 旗下企业 Debug 正寻求政府许可在加利福尼亚州和佛罗里达州释放 3200 万只雄蚊。这些雄蚊携带了沃尔巴克氏体细菌（Wolbachia），会导致细胞质不亲和性，意思是雄蚊的精子无法让野雌蚊的卵子受精。理论上这会导致蚊群数量逐代减少。雄蚊不会叮咬人，只有雌蚊才会，因此 Debug 并没有释放大量吸血昆虫。Debug 正在等待美国环保署的批准，公众意见征询截止日期 6 月 5 日。目前的公众意见显示很多人持有阴谋论观点，声称“人不是实验鼠”。

CVE-2026-11344 | code-projects Vehicle Management System 1.0 New Driver Registration Form newdriver.php photo unrestricted upload

VulDB Recent Entries
1 month ago
A vulnerability marked as critical has been reported in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. This vulnerability was named CVE-2026-11344. The attack may be initiated remotely. In addition, an exploit is available.
vuldb.com

CVE-2026-11342 | code-projects Hotel and Tourism Reservation System 1.0 /details.php room sql injection

VulDB Recent Entries
1 month ago
A vulnerability labeled as critical has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the argument room leads to sql injection. This vulnerability is uniquely identified as CVE-2026-11342. The attack can be launched remotely. Moreover, an exploit is present.
vuldb.com

CVE-2026-11341 | D-Link DWR-M920 up to 1.1.50 /boafrm/formIMEISetup sub_412DA0 IMEI_value os command injection

VulDB Recent Entries
1 month ago
A vulnerability identified as critical has been detected in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEI_value causes os command injection. This vulnerability is handled as CVE-2026-11341. The attack can be initiated remotely. Additionally, an exploit exists.
vuldb.com

Managed ad