Aggregator

快速预览！2025.3.24—3.30安全动态周回顾。

3月28日，北京威努特技术有限公司（简称“威努特”）与杭州市上城区国有资本运营集团有限公司（简称“上城资本集团

在 Android 操作系统中，研究人员发现了一个编号为 CVE-2024-31317 的严重漏洞。

快速预览！2025.3.24—3.30安全动态周回顾。

3月28日，北京威努特技术有限公司（简称“威努特”）与杭州市上城区国有资本运营集团有限公司（简称“上城资本集团

在 Android 操作系统中，研究人员发现了一个编号为 CVE-2024-31317 的严重漏洞。

快速预览！2025.3.24—3.30安全动态周回顾。

3月28日，北京威努特技术有限公司（简称“威努特”）与杭州市上城区国有资本运营集团有限公司（简称“上城资本集团

在 Android 操作系统中，研究人员发现了一个编号为 CVE-2024-31317 的严重漏洞。

Как взломать iPhone через PNG.

快速预览！2025.3.24—3.30安全动态周回顾。

3月28日，北京威努特技术有限公司（简称“威努特”）与杭州市上城区国有资本运营集团有限公司（简称“上城资本集团

在 Android 操作系统中，研究人员发现了一个编号为 CVE-2024-31317 的严重漏洞。

阿里云在2025年年初首次推出云上免费安全体检服务，旨在帮助用户评估并提升其云上业务系统的安全性。

A vulnerability, which was classified as critical, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2025-3018. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Submit #524623 / VDB-302070

A vulnerability, which was classified as critical, has been found in TA-Lib up to 0.6.4. This issue affects the function setInputBuffer of the file src/tools/ta_regtest/ta_test_func/test_minmax.c of the component ta_regtest. The manipulation leads to out-of-bounds write. The identification of this vulnerability is CVE-2025-3017. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/AssetLib/MDL/MDLMaterialLoader.cpp of the component MDL File Handler. The manipulation of the argument mWidth/mHeight leads to resource consumption. This vulnerability was named CVE-2025-3016. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepresentation of the file code/AssetLib/ASE/ASELoader.cpp of the component ASE File Handler. The manipulation of the argument mIndices leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2025-3015. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Submit #524603 / VDB-302069