Aggregator

Press enter or click to view image in full sizeBy kjuliusBug bounty hunting is exciting.You find vul

OpenAI 升级 GPT-5.5 Instant 模型；Meta 等四大社交平台就青少年心理健康诉讼与美国一学区和解；2026 款吉利牛仔上市

Hello Everyone,Today, I want to share my experience of discovering an account takeover (ATO) vulnera

From recon to flag capture: a breakdown of my solutions.Press enter or click to view image in full s

Currently trending CVE - Hype Score: 1

Currently trending CVE - Hype Score: 1 - Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection. (Support for code evaluation has been removed in 1.6.16 and 1.7.1.)

黄仁勋评价华为突破：台积电领先10年华为半导体25日正式发布韬 (τ) 定律，在不依赖光刻机设备下提升晶片效能与电晶体密度。华为预计到2031年，基于这个技术路线的高端晶片晶体管密度，将达到等同于 1

Томас Левенсон показывает, что доводы против вакцин почти не изменились со времен оспы, хотя на стороне прививок теперь микробиология, иммунология и огромная статистика.

A vulnerability, which was classified as critical, was found in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages of the file dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. Executing a manipulation can lead to heap-based buffer overflow. The identification of this vulnerability is CVE-2026-10194. The attack may be launched remotely. There is no exploit available. A patch should be applied to remediate this issue.

Коллаборация IceCube отвергла старую схему с одной степенной зависимостью и нашла заметный перелом около 30 ТэВ.

Submit #821029 / VDB-367475

A vulnerability, which was classified as critical, has been found in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\ComnController.java of the component ComnController. Performing a manipulation of the argument system.user.query results in sql injection. This vulnerability was named CVE-2026-10193. The attack may be initiated remotely. In addition, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

Palo Alto Networks is warning that hackers are now exploiting a PAN-OS GlobalProtect authentication bypass flaw, tracked as CVE-2026-0257, in attacks attempting to breach corporate networks. [...]