Aggregator

Мошенники собрали редкий набор приёмов, рассчитанный на доверие, спешку и будничную рутину.

A vulnerability has been found in Concrete CMS up to 9.5.0 and classified as problematic. This affects the function Download of the file /dashboard/extend/install/download/. The manipulation leads to cross-site request forgery. This vulnerability is documented as CVE-2026-8140. The attack can be initiated remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in Concrete CMS up to 9.5.0. Affected by this issue is some unknown functionality of the file bulk_user_assignment.php. Executing a manipulation can lead to incorrect authorization. This vulnerability is registered as CVE-2026-8350. It is possible to launch the attack remotely. No exploit is available.

A vulnerability, which was classified as problematic, has been found in Concrete CMS up to 9.5.0. Affected by this vulnerability is the function install_package of the file concrete/controllers/single_page/dashboard/extend/install.php of the component Installation Handler. Performing a manipulation results in cross-site request forgery. This vulnerability is cataloged as CVE-2026-8421. It is possible to initiate the attack remotely. There is no exploit available.

五角大楼的网络作战部门正在组建一支任务部队，以加速采用具备强大黑客能力的尖端人工智能工具

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

阅读： 11通告编号:NS-2026-0001TAG：Apache Struts、XXE、S2-069、CVE-20

当地时间5月21日，SpaceX在发射前排查多项技术问题后，推迟了 “星舰” 火箭第12次重大试飞任务。北京时间今天早上，在美国得克萨斯州“星际基地”新的2号发射台，SpaceX全新升级版重型运载火箭

阅读： 11通告编号:NS-2026-0002TAG：安全更新、Windows、Office、SQL Server、Azure漏洞危害：攻击者利用

This issue looks like a false-positive. Please review the listed sources and think about not using this entry.

A vulnerability classified as critical was found in Linux Kernel up to 6.18.9. The affected element is the function cfg80211_get_ies_channel_number. Executing a manipulation can lead to privilege escalation. This vulnerability appears as CVE-2025-71227. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is advised.

This issue is likely a false positive. Please verify the cited sources and consider not including this entry.

A vulnerability was found in Linux Kernel up to 6.6.124/6.12.71/6.18.10/6.19.0 and classified as critical. Affected is the function rtw_core_enable_beacon of the component rtw88. Such manipulation leads to state issue. This vulnerability is uniquely identified as CVE-2025-71229. The attack can only be initiated within the local network. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.69/6.18.9. The impacted element is the function raid1_reshape. The manipulation of the argument raid_disks leads to out-of-bounds read. This vulnerability is traded as CVE-2025-71225. Access to the local network is required for this attack to succeed. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in memcached up to 1.6.41. This affects the function sasl_server_userdb_checkpass. Executing a manipulation can lead to observable timing discrepancy. This vulnerability appears as CVE-2026-47784. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

阅读： 14通告编号:NS-2026-0003TAG：GNU InetUtils Telnetd、验证绕过、CVE-

Currently trending CVE - Hype Score: 10