Aggregator

Submit #616388 / VDB-177397

A vulnerability, which was classified as critical, was found in Tenda FH451 1.0.0.9. This affects the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument Username leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2025-7796. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. Affected by this issue is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to stack-based buffer overflow. This vulnerability is handled as CVE-2025-7795. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. This vulnerability is known as CVE-2025-7794. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary. The manipulation of the argument webSiteId leads to stack-based buffer overflow. This vulnerability is traded as CVE-2025-7793. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Tenda FH451 1.0.0.9. It has been rated as critical. This issue affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2025-7792. The attack may be initiated remotely. Furthermore, there is an exploit available.

Submit #616383 / VDB-313334

Submit #616382 / VDB-177393

Submit #616351 / VDB-177391

Mozilla 开发者宣布，预计 7 月 22 日释出的 Firefox 141 将支持 WebGPU。目前对 WebGPU 的支持仅限于 Windows 版本的 Firefox，未来几个月将支持 Linux 和 Mac 版本。WebGPU 为 Web 提供了下一代高性能图形 API，允许在 GPU 上执行渲染和计算操作，Google Chrome 最早于 2023 年引入了对该 API 的支持，而苹果的 Safari 预计将在秋天释出的 v26 中支持 WebGPU。Firefox 的 WebGPU 实现是基于用 Rust 开发的 WGPU，为底层平台的底层图形 API如 Direct3D 12、Metal 和 Vulkan 提供了统一可移植的接口。WGPU 托管在 GitHub 上，是作为一个独立开源项目开发的，Mozilla 是其主要贡献者。

/r/netsec 是一个由社区管理的技术信息安全内容聚合平台，旨在为安全从业者、学生、研究人员和黑客提供有价值的信息。

Submit #616345 / VDB-316857

Submit #616344 / VDB-316856

Submit #616318 / VDB-316855

Submit #616317 / VDB-316854

Submit #616316 / VDB-316853

VMware patched flaws disclosed during the Pwn2Own Berlin 2025 hacking contest, where researchers earned $340,000 for exploiting them. Broadcom four vulnerabilities in VMware products demonstrated at Pwn2Own Berlin 2025. White hat hackers earned over $340,000 for VMware exploits, including $150,000 awarded to STARLabs SG for using an integer overflow flaw to compromise VMware ESXi. Below […]

Submit #616314 / VDB-177394

Submit #616312 / VDB-177395

Submit #616311 / VDB-177389