Aggregator

牙科福利管理机构 DentaQuest 发生数据泄露事件，据报道已暴露 260 万账户的敏感信息。 该安全事件于上月曝光，当时臭名昭著的勒索组织 ShinyHunters 将该公司的数据列在其泄露网站上，并声称已窃取超过 234 GB 的数据。据该威胁行为者称，在与公司未能达成协议后，这些数据被公开泄露。 DentaQuest 是 Sun Life 旗下的子公司，也是美国最大的牙科福利管理机构之一...

A vulnerability labeled as problematic has been found in HCL DX Compose 9.5. Impacted is an unknown function. The manipulation results in cross site scripting. This vulnerability was named CVE-2026-21825. The attack may be performed from remote. There is no available exploit.

A vulnerability identified as problematic has been detected in HCL Digital Experience & DX Compose 9.5. This issue affects some unknown processing of the component Header Handler. The manipulation of the argument Host leads to open redirect. This vulnerability is uniquely identified as CVE-2026-21826. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in HCL Digital Experience 9.5. This vulnerability affects unknown code of the component Digital Asset Management API. Executing a manipulation can lead to os command injection. This vulnerability is handled as CVE-2026-21837. The attack can be executed remotely. There is not any exploit available.

A vulnerability was found in decompress. It has been rated as problematic. This affects an unknown part of the component ZIP Handler. Performing a manipulation results in path traversal: '\..\filename'. This vulnerability is known as CVE-2026-10732. Remote exploitation of the attack is possible. No exploit is available.

Submit #832401 / VDB-368870

A vulnerability was found in onnx onnx-mlir up to 0.5.0.0. It has been declared as problematic. Affected by this issue is the function generate_hash_key of the file src/Runtime/python/torch_onnxmlir/src/torch_onnxmlir/backend.py of the component Placeholder Node Cache Handler. Such manipulation leads to use of weak hash. This vulnerability is traded as CVE-2026-11329. An attack has to be approached locally. There is no exploit available. Applying a patch is advised to resolve this issue.

A few months ago, I wrote a diary about a payload that was embedded into a JPEG picture. It was a M

2026年6月5日 14:45软件资讯00.45K

Our TLS inspection proxy PolarProxy has been updated with bug fixes, improved performance and more reliable PCAP output. The recent PolarProxy 2.0 release added musl/Alpine compatibility and support for unencrypted HTTP proxy requests. But there were a few small, yet very important, updates that unf[...]

,  Friday, 05 June 2026 06:45:00 (UTC/GMT)

Press enter or click to view image in full sizeMy journey into cloud computing and the concepts that

Submit #832358 / VDB-368865

error code: 1003

Hola 浏览器的 Windows 版本在一次供应链攻击中被入侵，攻击者通过该浏览器分发了一个未申报的可执行文件，研究人员确认该文件为加密货币矿机。 这一入侵事件是在 Hola 浏览器为通过 AppEsteem 认证而进行的定期合规性检查中发现的。该浏览器此前曾通过该项认证。 Hola 是一家以色列公司，以其 Hola VPN 闻名。该 VPN 服务允许用户通过其他用户的设备或付费代理基础设施路由...

A walkthrough covering HTTP brute-forcing, WebDAV exploitation, and SMB enumeration to capture all f

You stumble on a login page. No “Register”, no “Forgot Password”. Just two lonely text boxes staring

You stumble on a login page. No “Register”, no “Forgot Password”. Just two lonely text boxes staring

苹果从 6 月 4 日周四起在美国德州引入年龄验证，此举是为了遵守德州的法律《App Store Accountability Act（SB 2420）》。去年 12 月法官阻止了该法律的生效，但上诉法庭推翻了这一裁决。苹果一直试图阻止在其应用商店 App Store 验证年龄，但它已宣布计划实施年龄验证以遵守犹他、路易斯安那、巴西、澳大利亚、新加坡和英国等地的法律。Google 也被要求对 Play Store 进行类似的更改。美国德州用户在创建新苹果账户时，需要使用信用卡或政府颁发的身份证件验证是否年满 18 周岁。苹果也可能根据用户账户的注册时间以及是否绑定了信用卡等自动验证用户的年龄。