Aggregator
安全牛十大产品创新:“问境+灵脉”系列持续引领智能体全生命周期安全治理!
1 day 11 hours ago
把握 AI 智能体产业演进态势,筑牢 AI 智能体全周期安全防线!
[0day-rubbish] VMS 6.48.809 Authenticated command injection to root RCE (8.8)
1 day 11 hours ago
Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] ONE Reporter 13.1 Authenticated RCE / privilege escalation via CommandExecutor (8.8)
1 day 11 hours ago
Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] Gemini 7.3.0 Authenticated SQL injection to xp_cmdshell RCE (8.8)
1 day 11 hours ago
Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] RoboTask 11.0.5.1229 Unauthenticated REST API remote task execution (9.8)
1 day 11 hours ago
Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] ActiveFax Server 10.70 Unauthenticated LPD Ghostscript %pipe% SYSTEM RCE (9.8)
1 day 11 hours ago
Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] Tornado 2.11.3 Unauthenticated arbitrary file write to root RCE (storeTo=file: to cron) (9.8)
1 day 11 hours ago
Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
[0day-rubbish] Datalore On-Premises 2026.2.3 Unauthenticated RCE via InteractiveReport access-mapping flaw (9.8)
1 day 11 hours ago
Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure
APPLE-SA-08-18-2026-1 Safari 26.6.1
1 day 11 hours ago
Full Disclosuremailing list archivesFrom: Apple Product Security via Fulldisclos
Cudy WR3000: Hard-coded JWT Secret to Root Command Injection
1 day 11 hours ago
Full Disclosuremailing list archivesFrom: Nir Yehoshua
腾讯云鼎实验室助力百度安全“Agent+”攻防能力挑战赛
1 day 11 hours ago
腾讯云鼎实验室助力百度安全“Agent+”攻防赛,以技术支撑Agent自主实战。
Думаете, вы помните свою жизнь? А вот и нет. Вы помните лишь ту удобную историю, которую собрал мозг
1 day 11 hours ago
Объясняем, почему реальность заканчивается в момент запоминания.
韩国估计朝鲜拥有80至120枚核武器
1 day 11 hours ago
韩国国防部长官安圭伯20日表示,韩方认为朝鲜大致拥有80至120枚核武器,但由于相关信息敏感,难以透露准确数量。安圭伯当天出席国会国防委员会全体会议,就最大在野党国民力量籍议员的相关提问作出以上回答。
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
1 day 11 hours ago
Vulnerability / Web SecurityCybersecurity researchers have disclosed details of a critical flaw in
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
1 day 11 hours ago
Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution.
The vulnerability, tracked as CVE-2026-32475, carries a CVSS score of 9.0 out of 10.0. It has been described as a case of unrestricted upload of a file with a dangerous type.
"The flaw lives in the Forms module's File
The Hacker News
Вирус можно получить, просто открыв «фотографию». Китайские хакеры атакуют дипломатов Мьянмы
1 day 11 hours ago
Вы открываете приглашение на церемонию — и запускаете скрытый бэкдор на своём компьютере.
ransomwhere v1.3.1
1 day 12 hours ago
A Proof of Concept ransomware sample that encrypts your files to test out your ransomware detection
New release CVE-Easy-List
1 day 12 hours ago
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project
XSRFProbe v3.0.0
1 day 12 hours ago
The Prime Cross Site Request Forgery Audit & Exploitation Toolkit.