Aggregator

一个开放的黑客社区，旨在帮助新手成长为资深地下技能专家。用户可提问、解答、学习，并通过Discord链接加入在线交流。

Submit #615735 / VDB-316847

Как украсть сессию, не вставая с кресла.

A vulnerability was found in Gnuboard 5.5.4/5.5.5. It has been classified as critical. This affects an unknown part of the component Change Password Handler. The manipulation leads to permission issues. This vulnerability is uniquely identified as CVE-2022-44216. Access to the local network is required for this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Gnuboard 6.0.7 and classified as critical. This issue affects some unknown processing. The manipulation leads to permissive cross-domain policy with untrusted domains. The identification of this vulnerability is CVE-2024-41475. The attack may be initiated remotely. There is no exploit available.

经济学人报道，癌症预防工作取得了成效，自 1990 年代以来发达国家癌症死亡率普遍下降。美国的癌症死亡率自 1990 年代以来下降了约三分之一。发达国家吸烟率下降，仅美国自 1975 年以来就减少了逾 300 万例癌症死亡。英国于 2008 年启动了针对年轻女孩的 HPV 疫苗接种计划，在 15 年内让 20 多岁女性的宫颈癌发病率降低了 90%。治疗方法的进步也改变了部分癌症的治疗结果。曾经致命的儿童白血病，如今五年生存率已超过九成。然而癌症研究的未来面临重重障碍，其中之一是美国特朗普政府计划削减癌症研究经费，中国预计在 2025 年超过美国成为癌症研究的主要资助国。

Submit #615736 / VDB-275825

A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the file src/main/java/com/jeesite/modules/sys/web/SsoController.java. The manipulation of the argument redirect leads to open redirect. This vulnerability was named CVE-2025-7785. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Submit #616104 / VDB-316846

A vulnerability classified as critical has been found in Red Hat Keycloak. This affects an unknown part of the component Admin Console. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2025-7784. The attack needs to be initiated within the local network. There is no exploit available.

2025年5月，国际知名咨询机构Verizon发布了《2025年数据泄露调查报告》。该报告综合分析了自2024年5月至2025年初的22052起安全事件，其中12195被确认为数据泄露事件，覆盖全球共139个国家。

文章探讨了如何辨别真AI智能体，强调其需具备自主性与任务闭环能力，并通过TEAR框架分析其核心要素。适合场景包括复杂任务与跨系统交互。工具选择涵盖无代码平台及开源框架，并需考虑成本因素。

ИИ сдался Карлсену и оценил его игру как любительскую.

梆梆安全连续三期入选中国信通院《数字安全护航技术能力全景图》，覆盖12大类48项细分领域，在移动安全赛道实现全领域覆盖，并通过深度应用人工智能技术驱动产品升级。