Aggregator

В новой тактике вымогателей от первого контакта до кражи данных проходит менее часа.

Как наука стала поводом для азартных игр на десятки миллионов долларов.

科学家首次精确编辑人类胚胎基因哥伦比亚大学科学家以前所未有的精确度编辑了早期人类胚胎的DNA，这一成果可能为培育具有特定特征的定制婴儿打开大门。领导这项研究的哥伦比亚大学遗传学家迪特尔·埃利呼吁就修改

A vulnerability identified as critical has been detected in SourceCodester Onlne Examination & Learning Management System and Syllabus-aligned Learning Management and Examination System 1.0. Affected by this issue is some unknown functionality of the file import_users.php. The manipulation of the argument raw_password with the input CICT_2026 leads to use of hard-coded password. This vulnerability is documented as CVE-2026-11552. The attack can be initiated remotely. Additionally, an exploit exists. This product is distributed under two entirely different names.

A vulnerability categorized as problematic has been discovered in Apache Cordova Plugin InAppBrowser up to 6.0.0 on iOS. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to an unknown weakness. This vulnerability is registered as CVE-2026-47430. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in maxfoundry WP-Paginate 2.1.3 on WordPress. It has been rated as problematic. Affected is an unknown function of the component Setting Handler. Performing a manipulation of the argument preset results in cross site scripting. This vulnerability is cataloged as CVE-2021-47982. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in WP Travel Kit Travelscape 1.0.3 on WordPress. It has been declared as critical. This impacts an unknown function. Such manipulation leads to unrestricted upload. This vulnerability is listed as CVE-2024-58349. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability was found in brooks24 admin-word-count-column 2.2 on WordPress. It has been classified as critical. This affects an unknown function of the file download-csv.php. This manipulation of the argument path causes path traversal. This vulnerability is tracked as CVE-2022-50953. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Submit #836751 / VDB-369162

A vulnerability was found in Sonaar Music Plugin 4.7 and classified as problematic. The impacted element is an unknown function of the file wp-comments-post.php. The manipulation of the argument Comment results in cross site scripting. This vulnerability is identified as CVE-2023-54351. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability has been found in WP24 Domain Check 1.6.2 on WordPress and classified as problematic. The affected element is an unknown function of the file options.php. The manipulation of the argument fieldnameDomain leads to cross site scripting. This vulnerability is referenced as CVE-2021-47984. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability, which was classified as problematic, was found in mra13 Accept Stripe Payments 2.0.39 on WordPress. Impacted is an unknown function of the file /wp-admin/options.php of the component Setting Handler. Executing a manipulation of the argument AcceptStripePayments-settings[currency_code] can lead to cross site scripting. The identification of this vulnerability is CVE-2021-47983. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in background-image-cropper Background Image Cropper 1.2. This issue affects some unknown processing of the file ups.php of the component PHP File Handler. Performing a manipulation results in unrestricted upload. This vulnerability was named CVE-2024-58348. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability classified as critical was found in webandprint Augmented Reality 7.0 on WordPress. This vulnerability affects unknown code of the file connector.minimal.php of the component PHP File Handler. Such manipulation leads to missing authentication. This vulnerability is uniquely identified as CVE-2023-54350. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability classified as critical has been found in WP Travel Kit Travelscape 1.0.3. This affects an unknown part of the file /wp-content/themes/seotheme/mar.php. This manipulation causes missing authentication. This vulnerability is handled as CVE-2023-54352. The attack can be initiated remotely. Additionally, an exploit exists.

Name: SAS CTF 2026 Quals (an SAS CTF event.)
Date: June 6, 2026, noon — 07 June 2026, 12:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.thesascon.com/
Rating weight: 31.00
Event organizers: Drovosec SAS CREW

Name: DalCTF 2026 (an DalCTF event.)
Date: June 6, 2026, 1 p.m. — 07 June 2026, 15:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Location: Halifax, Canada and Online
Offical URL: https://dalctf2026.com/
Rating weight: 24.89
Event organizers: HTTP Status 418

Алгоритмы могут начать улучшать себя сами. И лучше бы нам нажать на тормоз — пока не поздно.