Qilin
You must login to view this content
Aggregator
Qilin
10 months 1 week ago
You must login to view this content
cohenido
OpenAI 在企业级市场抢微软的客户
10 months 1 week ago
去年春天制药公司 Amgen 宣布计划为其 2 万员工采购微软的 Copilot AI 助手，微软为此在多个案例研究中宣传了其新客户。但 13 个月后 Amgen 员工在使用 OpenAI 的 ChatGPT。微软销售表示他们面临向尽可能多的客户推销 Copilot 的压力，对于来自合作伙伴的挑战感到措手不及。OpenAI 在企业级市场抢微软的客户让两家公司本已紧张的关系火上浇油。OpenAI 最近表示其付费企业用户已达 300 万，比几个月前增长了 50%。微软则表示，财富 500 强企业七成都在使用 Copilot，付费用户数量比去年同期增长了两倍。
CVE-2025-25905 | CADClick up to 1.13.0 tree cross site scripting (EUVD-2025-19107)
10 months 1 week ago
A vulnerability was found in CADClick up to 1.13.0 and classified as problematic. This issue affects some unknown processing. The manipulation of the argument tree leads to cross site scripting.
The identification of this vulnerability is CVE-2025-25905. The attack may be initiated remotely. There is no exploit available.
vuldb.com
CVE-2024-57708 | OneTrust SDK 6.33.0 Object.setPrototypeOf/__proto__/Object.assign denial of service (EUVD-2024-54703)
10 months 1 week ago
A vulnerability has been found in OneTrust SDK 6.33.0 and classified as problematic. This vulnerability affects the function Object.setPrototypeOf/__proto__/Object.assign. The manipulation leads to denial of service.
This vulnerability was named CVE-2024-57708. Attacking locally is a requirement. There is no exploit available.
vuldb.com
CVE-2025-50178 | JuliaWeb GitForge.jl up to 0.4.2 on GitHub GitForge.get_repo information disclosure
10 months 1 week ago
A vulnerability, which was classified as problematic, was found in JuliaWeb GitForge.jl up to 0.4.2 on GitHub. This affects the function GitForge.get_repo. The manipulation leads to information disclosure.
This vulnerability is uniquely identified as CVE-2025-50178. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
Citrix security advisory (AV25-374)
10 months 1 week ago
Canadian Centre for Cyber Security
CVE-2025-49135 | cvat up to 2.39.x authorization (GHSA-frpr-5w6q-hh4f)
10 months 1 week ago
A vulnerability, which was classified as problematic, has been found in cvat up to 2.39.x. Affected by this issue is some unknown functionality. The manipulation leads to authorization bypass.
This vulnerability is handled as CVE-2025-49135. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-49845 | Discourse up to 3.4.5/3.5.0.beta7-dev Whisper information disclosure (EUVD-2025-19108)
10 months 1 week ago
A vulnerability classified as problematic was found in Discourse up to 3.4.5/3.5.0.beta7-dev. Affected by this vulnerability is an unknown functionality of the component Whisper Handler. The manipulation leads to information disclosure.
This vulnerability is known as CVE-2025-49845. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
APT28 黑客利用 Signal 聊天工具对乌克兰发动新的恶意软件攻击
10 months 1 week ago
安全客
SecWiki News 2025-06-25 Review
10 months 1 week ago
Ransomware victims are getting better at haggling with hackers
10 months 1 week ago
Nearly half of companies paid a ransom to get their data back last year, according to new research, but they’re taking a hard line with hackers to strike fair deals. In its latest State of Ransomware report, Sophos said this was the second highest rate of ransom payments in six years. However, more than half […]
The post Ransomware victims are getting better at haggling with hackers appeared first on Ransomware.org.
Emma Woollacott
Androxgh0st 僵尸网络扩大影响范围，入侵美国大学服务器
10 months 1 week ago
安全客
Security Advisory: Citrix NetScaler ADC / Gateway – CVE‑2025‑6543
10 months 1 week ago
Security Advisory: Citrix NetScaler ADC / Gateway – CVE‑2025‑6543
Dark Web Informer - Cyber Threat Intelligence
New Malware Spotted in The Wild Using Prompt Injection to Manipulate AI Models Processing Sample
10 months 1 week ago
Cybersecurity researchers have discovered a groundbreaking new malware strain that represents the first documented attempt to weaponize prompt injection attacks against AI-powered security analysis tools. The malware, dubbed “Skynet” by its creators, was anonymously uploaded to VirusTotal in early June 2025 from the Netherlands, marking a significant evolution in adversarial tactics targeting artificial intelligence systems […]
The post New Malware Spotted in The Wild Using Prompt Injection to Manipulate AI Models Processing Sample appeared first on Cyber Security News.
Tushar Subhra Dutta
Hackers Use Open-Source Offensive Cyber Tools to Attack Financial Businesses in Africa
10 months 1 week ago
The threat actor used a combination of open-source and publicly available tools to establish their attack framework
CVE-2025-6604 | SourceCodester Best Salon Management System 1.0 /panel/add-staff.php Name sql injection (EUVD-2025-19097)
10 months 1 week ago
A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/add-staff.php. The manipulation of the argument Name leads to sql injection.
This vulnerability is uniquely identified as CVE-2025-6604. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-6436 | Mozilla Firefox up to 139 memory corruption (EUVD-2025-19098 / Nessus ID 240334)
10 months 1 week ago
A vulnerability was found in Mozilla Firefox up to 139 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to memory corruption.
This vulnerability is handled as CVE-2025-6436. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2023-38142 | Microsoft Windows up to Server 2022 Kernel Local Privilege Escalation (EUVD-2023-41967)
10 months 1 week ago
A vulnerability was found in Microsoft Windows and classified as critical. This issue affects some unknown processing of the component Kernel. The manipulation leads to Local Privilege Escalation.
The identification of this vulnerability is CVE-2023-38142. The attack needs to be approached locally. There is no exploit available.
It is recommended to apply a patch to fix this issue.
vuldb.com
CVE-2025-41256 | iterate Cyberduck/Mountain Duck TLS Certificate weak hash (EUVD-2025-19095)
10 months 1 week ago
A vulnerability classified as problematic has been found in iterate Cyberduck and Mountain Duck. Affected is an unknown function of the component TLS Certificate Handler. The manipulation leads to use of weak hash.
This vulnerability is traded as CVE-2025-41256. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com