Behind the Book: Threat Hunting macOS with Jaron Bradley
文章指出用户IP地址因频繁请求被限制访问Reddit，建议等待几分钟后重试。如仍受限，可联系客服并提供账号及特定代码解决问题。
Aggregator
阿里云jtools详解及codeql分析调用链
10 months 2 weeks ago
阿里云jtools详解及codeql分析调用链
CVE-2025-6205 | Dassault Systèmes DELMIA Apriso up to 2025 authorization (EUVD-2025-23493)
10 months 2 weeks ago
A vulnerability classified as critical has been found in Dassault Systèmes DELMIA Apriso up to 2025. This affects an unknown part. The manipulation leads to missing authorization.
This vulnerability is uniquely identified as CVE-2025-6205. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2025-6204 | Dassault Systèmes DELMIA Apriso up to 2025 code injection (EUVD-2025-23494)
10 months 2 weeks ago
A vulnerability was found in Dassault Systèmes DELMIA Apriso up to 2025. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to code injection.
This vulnerability is handled as CVE-2025-6204. The attack may be launched remotely. There is no exploit available.
vuldb.com
Release Notes: QRadar SOAR App, TI Lookup Free Access, and 2,900+ New Detection Rules
10 months 2 weeks ago
July brought powerful new updates to help your SOC catch threats faster, reduce manual effort, and make more confident decisions, right inside your existing workflows. From fresh integrations to better detection coverage, these changes are built to support your team every step of the way. In this update: Keep reading to explore what’s new and how […]
The post Release Notes: QRadar SOAR App, TI Lookup Free Access, and 2,900+ New Detection Rules appeared first on ANY.RUN's Cybersecurity Blog.
ANY.RUN
CVE-2025-0932 | Arm Bifrost GPU Userspace Driver use after free (EUVD-2025-23496)
10 months 2 weeks ago
A vulnerability was found in Arm Bifrost GPU Userspace Driver, Valhall GPU Userspace Driver and 5th Gen GPU Architecture Userspace Driver. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to use after free.
This vulnerability is known as CVE-2025-0932. An attack has to be approached locally. There is no exploit available.
vuldb.com
Blaugust 2025 Reflections #0
10 months 2 weeks ago
这篇文章介绍了作者在Blaugust活动中发现的各类博客，涵盖个人成长、写作习惯、咖啡冲煮、书籍评分等多个主题。推荐的博客风格多样，包括清新设计、工作与生活平衡感悟、阅读体验分享等。
CVE-2025-41658 | CODESYS Runtime Toolkit prior 3.5.21.20 default permission (VDE-2025-049 / EUVD-2025-23492)
10 months 2 weeks ago
A vulnerability was found in CODESYS Runtime Toolkit, Control for BeagleBone SL, Control for emPC-A, iMX6 SL, Control for IOT2000 SL, Control for Linux ARM SL, Control for Linux SL, Control for PFC100 SL, Control for PFC200 SL, Control for PLCnext SL, Control for Raspberry Pi SL, Control for WAGO Touch Panels 600 SL and Virtual Control SL. It has been classified as critical. Affected is an unknown function. The manipulation leads to incorrect default permissions.
This vulnerability is traded as CVE-2025-41658. The attack needs to be approached locally. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-8341 | Grafana Infinity Datasource Plugin up to 3.4.0 URL Restriction server-side request forgery (EUVD-2025-23495 / WID-SEC-2025-1704)
10 months 2 weeks ago
A vulnerability was found in Grafana Infinity Datasource Plugin up to 3.4.0 and classified as critical. This issue affects some unknown processing of the component URL Restriction Handler. The manipulation leads to server-side request forgery.
The identification of this vulnerability is CVE-2025-8341. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2025-41691 | CODESYS Control RTE Communication Request null pointer dereference (VDE-2025-070 / EUVD-2025-23490)
10 months 2 weeks ago
A vulnerability has been found in CODESYS Control RTE, Control RTE SL, Control Win, HMI, Control for BeagleBone SL, Control for emPC-A, iMX6 SL, Control for IOT2000 SL, Control for Linux ARM SL, Control for Linux SL, Control for PFC100 SL, Control for PFC200 SL, Control for PLCnext SL, Control for Raspberry Pi SL, Control for WAGO Touch Panels 600 SL and Virtual Control SL and classified as problematic. This vulnerability affects unknown code of the component Communication Request Handler. The manipulation leads to null pointer dereference.
This vulnerability was named CVE-2025-41691. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
Fix What Matters Most: Six New NodeZero® Capabilities That Redefine Risk-Based Vulnerability Management
10 months 2 weeks ago
Horizon3.ai通过NodeZero®重新定义了基于风险的漏洞管理（RBVM），聚焦于攻击者可利用的实际漏洞、真实威胁行为及业务影响。其六项新功能构建了一个闭环系统，从发现到修复再到验证，帮助企业有效降低真实风险。
CVE-2025-41659 | CODESYS Control RTE PKI Folder permission assignment (VDE-2025-051 / EUVD-2025-23491)
10 months 2 weeks ago
A vulnerability, which was classified as problematic, was found in CODESYS Control RTE, Control RTE SL, Control Win, HMI, Runtime Toolkit, Control for BeagleBone SL, Control for emPC-A, iMX6 SL, Control for IOT2000 SL, Control for Linux ARM SL, Control for Linux SL, Control for PFC100 SL, Control for PFC200 SL, Control for PLCnext SL, Control for Raspberry Pi SL, Control for WAGO Touch Panels 600 SL and Virtual Control SL. This affects an unknown part of the component PKI Folder. The manipulation leads to incorrect permission assignment.
This vulnerability is uniquely identified as CVE-2025-41659. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
Не вирус, не хак, не баг. Это просто Windows. И она уже записала весь ваш день — по кадру
10 months 2 weeks ago
Технология от Microsoft защищает твои пароли… пока они подписаны как "пароль".
Scattered Spider Intensifies Cyber Onslaught with New Tactics and Ransomware Deployment
10 months 2 weeks ago
Scattered Spider网络犯罪组织活动升级，利用ransomware、社会工程学和身份盗窃攻击全球关键基础设施。其最新行动包括部署DragonForce勒索软件加密企业系统，并通过云服务窃取数据。该组织擅长社交工程和身份劫持，利用多种恶意软件和合法工具隐蔽行动，对商业和关键行业构成严重威胁。
Ransomware gangs join attacks targeting Microsoft SharePoint servers
10 months 2 weeks ago
勒索软件团伙利用微软SharePoint漏洞链攻击全球至少148个组织，发现新变种4L4MD4R并通过恶意加载器传播。攻击者试图禁用安全监控。微软和谷歌将其与中国威胁行为者相关联，并已修复相关漏洞。
Gunra
10 months 2 weeks ago
You must login to view this content
cohenido
Ransomware gangs join attacks targeting Microsoft SharePoint servers
10 months 2 weeks ago
Ransomware gangs have recently joined ongoing attacks targeting a Microsoft SharePoint vulnerability chain, part of a broader exploitation campaign that has already led to the breach of at least 148 organizations worldwide. [...]
Sergiu Gatlan
CVE-2025-20700 | Bluetooth GATT Service missing authentication (EUVD-2025-23489)
10 months 2 weeks ago
A vulnerability classified as critical was found in Bluetooth. Affected by this vulnerability is an unknown functionality of the component GATT Service. The manipulation leads to missing authentication.
This vulnerability is known as CVE-2025-20700. The attack can only be done within the local network. There is no exploit available.
vuldb.com
CVE-2025-20701 | Bluetooth BR/EDR missing authentication (EUVD-2025-23488)
10 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in Bluetooth. Affected by this issue is some unknown functionality of the component BR/EDR. The manipulation leads to missing authentication.
This vulnerability is handled as CVE-2025-20701. The attack can only be initiated within the local network. There is no exploit available.
vuldb.com
CVE-2025-20702 | Bluetooth Custom Protocol missing authentication (EUVD-2025-23487)
10 months 2 weeks ago
A vulnerability, which was classified as critical, was found in Bluetooth. This affects an unknown part of the component Custom Protocol. The manipulation leads to missing authentication.
This vulnerability is uniquely identified as CVE-2025-20702. The attack needs to be done within the local network. There is no exploit available.
vuldb.com