Aggregator

Submit #615760 / VDB-316850

Submit #615758 / VDB-316849

Submit #615741 / VDB-316848

Alice、Bob、Eve等角色通过将密码学转化为人类可理解的故事，使复杂理论更贴近生活。这些象征性的角色展示了我们在数字时代面临的信任与安全挑战。

A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-7786. The attack may be initiated remotely. Furthermore, there is an exploit available.

一个开放的黑客社区，旨在帮助新手成长为资深地下技能专家。用户可提问、解答、学习，并通过Discord链接加入在线交流。

Submit #615735 / VDB-316847

Как украсть сессию, не вставая с кресла.

A vulnerability was found in Gnuboard 5.5.4/5.5.5. It has been classified as critical. This affects an unknown part of the component Change Password Handler. The manipulation leads to permission issues. This vulnerability is uniquely identified as CVE-2022-44216. Access to the local network is required for this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Gnuboard 6.0.7 and classified as critical. This issue affects some unknown processing. The manipulation leads to permissive cross-domain policy with untrusted domains. The identification of this vulnerability is CVE-2024-41475. The attack may be initiated remotely. There is no exploit available.

经济学人报道，癌症预防工作取得了成效，自 1990 年代以来发达国家癌症死亡率普遍下降。美国的癌症死亡率自 1990 年代以来下降了约三分之一。发达国家吸烟率下降，仅美国自 1975 年以来就减少了逾 300 万例癌症死亡。英国于 2008 年启动了针对年轻女孩的 HPV 疫苗接种计划，在 15 年内让 20 多岁女性的宫颈癌发病率降低了 90%。治疗方法的进步也改变了部分癌症的治疗结果。曾经致命的儿童白血病，如今五年生存率已超过九成。然而癌症研究的未来面临重重障碍，其中之一是美国特朗普政府计划削减癌症研究经费，中国预计在 2025 年超过美国成为癌症研究的主要资助国。

Submit #615736 / VDB-275825

A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the file src/main/java/com/jeesite/modules/sys/web/SsoController.java. The manipulation of the argument redirect leads to open redirect. This vulnerability was named CVE-2025-7785. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Submit #616104 / VDB-316846