安全研究 Safety research
Ibm多款产品存在配置文件中存储口令漏洞
Ibm多款产品存在配置文件中存储口令漏洞 旗舰店
Microsoft故障转移群集信息泄露漏洞https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59188Shuffle Master Deck Mate 2不安全更新链https://nvd.nist.gov/vuln/detail/CVE-2025-34500Ibm多款产品存在配置文件中存储口令漏洞https://nvd.nist.gov/vuln/detail/CVE-2025-36002
发布时间: 2025 - 10 - 27
查看详情 >>
Lazarus组织瞄准无人机领域开展攻击活动
Lazarus组织瞄准无人机领域开展攻击活动 旗舰店
Lazarus组织瞄准无人机领域开展攻击活动https://www.welivesecurity.com/en/eset-research/gotta-fly-lazarus-targets-uav-sector/新型Caminho加载器利用LSB隐写术传播恶意软件https://arcticwolf.com/resources/blog/brazilian-caminho-loader-employs-lsb-steganography-to-deliver-multiple-malware-families/Delta Electronics ASDA-Soft漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-04ASKI Energy ALS-Mini-S8 and ALS-Mini-S4漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-02Smishing Triad组织发起短信钓鱼攻击瞄准全球用户https://unit42.paloaltonetworks.com/global-smishing-campaign/
发布时间: 2025 - 10 - 27
查看详情 >>
FFmpeg SANM process_ftch中的堆缓冲区溢出写入
FFmpeg SANM process_ftch中的堆缓冲区溢出写入 旗舰店
70mai X200 HTTP Web服务器默认凭据https://www.cve.org/CVERecord?id=CVE-2025-11943FFmpeg SANM process_ftch中的堆缓冲区溢出写入https://nvd.nist.gov/vuln/detail/CVE-2025-59734scsi:target:target_core_config：添加长度检查以避免缓冲区溢出https://www.kernel.org/WP-Go地图（前身为WP-Google地图）<=9.0.48-未经身份验证的缓存中毒https://github.com/CodeCabin/wp-google-maps/pull/1087/files通过维基百科在Cargo中存储XSShttps://gerrit.wikimedia.org/r/1179707
发布时间: 2025 - 10 - 20
查看详情 >>
Rockwell Automation FactoryTalk Linx漏洞预警
Rockwell Automation FactoryTalk Linx漏洞预警 旗舰店
Rockwell Automation FactoryTalk Linx漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-289-02Hitachi Energy MACH GWS漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-289-11Siemens HyperLynx and Industrial Edge App Publisher漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-289-10
发布时间: 2025 - 10 - 20
查看详情 >>
IBM Transformation Extender高级代码执行
IBM Transformation Extender高级代码执行 旗舰店
IBM Transformation Extender高级代码执行https://www.cve.org/CVERecord?id=CVE-2023-49886代码项目在线课程注册编辑-Course.php sql注入https://nvd.nist.gov/vuln/detail/CVE-2025-11342XWiki OIDC身份验证器容易为任何具有“查看”权限的用户创建令牌https://www.cve.org/CVERecord?id=CVE-2025-49594FlowiseAI/Flosise存在文件上传漏洞https://nvd.nist.gov/vuln/detail/CVE-2025-61687
发布时间: 2025 - 10 - 09
查看详情 >>
UNC5221组织针对美国科技和法律行业部署BRICKSTORM后门
UNC5221组织针对美国科技和法律行业部署BRICKSTORM后门 旗舰店
黑客组织BO Team更新攻击工具https://securelist.ru/bo-team-upgrades-brockendoor-and-zeronetkit-backdoors/113536/LastPass发现伪造的GitHub仓库传播macOS窃密软件Atomichttps://blog.lastpass.com/posts/attack-targeting-macs-via-github-pagesUNC5221组织针对美国科技和法律行业部署BRICKSTORM后门https://cloud.google.com/blog/topics/threat-intelligence/brickstorm-espionage-campaignLumma Stealer新变种通过分层混淆来逃避检测https://gbhackers.com/lummastealers-details/
发布时间: 2025 - 10 - 09
查看详情 >>
IBM多款产品存在指定输入类型的验证不恰当漏洞
IBM多款产品存在指定输入类型的验证不恰当漏洞 旗舰店
易方CMS Migrate.php exportInstallTable信息披露https://vuldb.com/?ctiid.321234givanz Vvweb-media.php无限制上传https://vuldb.com/?ctiid.321233IBM多款产品存在指定输入类型的验证不恰当漏洞https://www.ibm.com/support/pages/node/7235432FNKvision Y215闭路电视摄像机密码加密弱哈希https://www.cve.org/CVERecord?id=CVE-2025-9383Buttercup浏览器扩展Vault访问控制https://vuldb.com/?id.319969
发布时间: 2025 - 08 - 25
查看详情 >>
FUJIFILM Healthcare Americas Synapse Mobility漏洞预警
FUJIFILM Healthcare Americas Synapse Mobility漏洞预警 旗舰店
Paper Werewolf利用WinRAR零日漏洞传播恶意软件https://gbhackers.com/paper-werewolf-exploits-winrar-zero-day-vulnerability/FUJIFILM Healthcare Americas Synapse Mobility漏洞预警https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-233-01MuddyWater针对全球多地首席财务官和财务高管发起网络钓鱼攻击https://hunt.io/blog/apt-muddywater-deploys-multi-stage-phishing-to-target-cfos新型加载器QuirkyLoader通过钓鱼邮件传播恶意软件https://www.ibm.com/think/x-force/ibm-x-force-threat-analysis-quirkyloaderScaly Wolf组织针对俄罗斯工程公司发起定向攻击https://news.drweb.com/show/?i=15046&lng=en&c=5
发布时间: 2025 - 08 - 25
查看详情 >>
宏正商城添加产品页面上传跨站脚本
宏正商城添加产品页面上传跨站脚本 旗舰店
OpenBao：特权操作员可以在底层主机上执行代码https://nvd.nist.gov/vuln/detail/CVE-2025-54997Frappe学习在图像上传功能中具有恶意SVG上传的潜力https://www.cve.org/CVERecord?id=CVE-2025-55006PDF审阅功能中的路径遍历漏洞https://github.com/ulab-uiuc/tiny-scientist/security/advisories/GHSA-rrgf-hcr9-jq6h宏正商城添加产品页面上传跨站脚本https://github.com/N1n3b9S/cve/issues/13#issue-3266856872
发布时间: 2025 - 08 - 11
查看详情 >>
DevilsTongue间谍软件针对多个国家Windows用户
DevilsTongue间谍软件针对多个国家Windows用户 旗舰店
DevilsTongue间谍软件针对多个国家Windows用户https://gbhackers.com/sophisticated-devilstongue-spyware/UAC-0099组织利用HTA文件部署MATCHBOIL加载器https://gbhackers.com/uac-0099-hackers-weaponize-hta-files/Delta Electronics DIAView漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-01Packet Power EMX and EG漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-05ealink IP Phones and RPS (Redirect and Provisioning Service)漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-219-08
发布时间: 2025 - 08 - 11
查看详情 >>
Imithemes Eventer存在授权机制缺失漏洞
Imithemes Eventer存在授权机制缺失漏洞 旗舰店
1、Imithemes Eventer存在授权机制缺失漏洞https://www.cnnvd.org.cn/home/globalSearch?keyword=CNNVD-202505-25472、Nasatheme Nasa_core存在PHP远程文件包含漏洞https://www.cnnvd.org.cn/home/globalSearch?keyword=CNNVD-202505-24593、RSJoomla! RSMail! 跨站脚本漏洞https://rsjoomla.com/4、CVE-2025-5837https://vuldb.com/?submit.591364
发布时间: 2025 - 06 - 09
查看详情 >>
Chaos RAT新变种针对Linux和Windows用户
Chaos RAT新变种针对Linux和Windows用户 旗舰店
1、APT组织利用PathWiper恶意软件针对乌克兰关键基础设施https://blog.talosintelligence.com/pathwiper-targets-ukraine/2、Chaos RAT新变种针对Linux和Windows用户https://gbhackers.com/new-chaos-rat-targets-linux-and-windows-users/3、APT组织利用VELETRIX和VShell恶意软件攻击中国电信行业https://www.seqrite.com/blog/operation-dragonclone-chinese-telecom-veletrix-vshell-malware/
发布时间: 2025 - 06 - 09
查看详情 >>
新型信息窃取恶意软件EDDIESTEALER通过假验证码传播
新型信息窃取恶意软件EDDIESTEALER通过假验证码传播 旗舰店
新型信息窃取恶意软件EDDIESTEALER通过假验证码传播https://www.elastic.co/security-labs/eddiestealerSiemens SiPass Integrated漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-148-02Instantel Micromate漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-148-04Silent Werewolf针对俄摩两国利用伪装邮件投递恶意加载器https://bi.zone/eng/expertise/blog/silent-werewolf-ispolzuet-novye-zagruzchiki-v-atakakh-na-rossiyskie-i-moldavskie-organizatsii/
发布时间: 2025 - 06 - 03
查看详情 >>
Asus Gt-ac2900_firmware存在认证机制不恰当漏洞
Asus Gt-ac2900_firmware存在认证机制不恰当漏洞 旗舰店
WordPress plugin Dreamstime Stock Photos 跨站脚本漏洞https://www.cnnvd.org.cn/home/globalSearch?keyword=CNNVD-202503-274Linux等厂商的多款产品存在空指针解引用漏洞https://www.cve.org/CVERecord?id=CVE-2023-46838PHPGurukul Medical Card Generation System 安全漏洞https://www.cnnvd.org.cn/home/globalSearch?keyword=CNNVD-202505-3557Asus Gt-ac2900_firmware存在认证机制不恰当漏洞https://github.com/atredispartners/advisories/blob/master/ATREDIS-2020-0010.md
发布时间: 2025 - 06 - 03
查看详情 >>
Netgate pfSense CE 跨站脚本漏洞
Netgate pfSense CE 跨站脚本漏洞 旗舰店
CVE-2025-47273https://www.cve.org/CVERecord?id=CVE-2025-47273CVE-2025-4808https://vuldb.com/?submit.572602Netgate pfSense CE 跨站脚本漏洞https://www.cve.org/CVERecord?id=CVE-2024-54779CVE-2025-4610https://www.cve.org/CVERecord?id=CVE-2025-4610
发布时间: 2025 - 05 - 19
查看详情 >>
Siemens SIMATIC PCS neo漏洞预警
Siemens SIMATIC PCS neo漏洞预警 旗舰店
Siemens SIMATIC PCS neo漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-12新型.NET多阶段加载器持续传播多款恶意软件https://gbhackers.com/new-net-multi-stage-loader-targets-windows-systems/APT28利用XSS漏洞向高价值邮件服务器注入恶意代码https://gbhackers.com/russian-hackers-exploit-xss-vulnerabilities/ECOVACS DEEBOT Vacuum and Base Station漏洞预警https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-19
发布时间: 2025 - 05 - 19
查看详情 >>
CVE-2025-4297
CVE-2025-4297 旗舰店
CVE-2025-4298https://www.tenda.com.cn/CVE-2025-4297https://vuldb.com/?ctiid.307401CVE-2025-4292https://vuldb.com/?ctiid.307399CVE-2025-4290https://vuldb.com/?ctiid.307397
发布时间: 2025 - 05 - 07
查看详情 >>
Mimic勒索软件变体通过Clipper窃取凭证重返医疗系统
Mimic勒索软件变体通过Clipper窃取凭证重返医疗系统 旗舰店
Mimic勒索软件变体通过Clipper窃取凭证重返医疗系统https://nationalcybersecurity.com/mimic-ransomware-variant-targets-healthcare-ransomware-cybercrime/?utm_source=rss&utm_medium=rss&utm_campaign=mimic-ransomware-variant-targets-healthcare-ransomware-cybercrimeCLFS零日漏洞利用导致勒索软件活动https://nationalcybersecurity.com/exploitation-of-clfs-zero-day-leads-to-ransomware-activity-ransomware-cybercrime/?utm_source=rss&utm_medium=rss&utm_campaign=exploitation-of-clfs-zero-day-leads-to-ransomware-activity-ransomware-cybercrimeDragonForce勒索团伙近期针对英国零售业发动大规模攻击https://nationalcybersecurity.com/dragonforce-ransomware-gang-from-hacktivists-to-high-street-extortionists-ransomware-cybercrime/?utm_source=rss&utm_medium=rss&utm_campaign=dragonforce-ransomware-gang-from-hacktivists-to-high-street-extortionists-r...
发布时间: 2025 - 05 - 07
查看详情 >>
旗舰店
CVE-2025-3389https://vuldb.com/?id.303635CVE-2025-3387https://www.cve.org/CVERecord?id=CVE-2025-3387CVE-2025-32409https://www.cve.org/CVERecord?id=CVE-2025-32409
发布时间: 2025 - 04 - 14
查看详情 >>
微软补丁日通告：2025年4月版
微软补丁日通告：2025年4月版 旗舰店
微软补丁日通告：2025年4月版https://msrc.microsoft.com/update-guide/releaseNote/2025-AprNeptune RAT：针对Windows系统的高级远控木马https://www.cyfirma.com/research/neptune-rat-an-advanced-windows-rat-with-system-destruction-capabilities-and-password-exfiltration-from-270-applications/伪装成政府官方应用的Android恶意软件变种分析https://www.seqrite.com/blog/beware-fake-nextgen-mparivahan-malware-returns-with-enhanced-stealth-and-data-theft/Scattered Spider借助多种钓鱼套件与RAT技术持续发起网络攻击https://www.silentpush.com/blog/scattered-spider-2025/?utm_source=rss&utm_medium=rss&utm_campaign=scattered-spider-2025APT32利用GitHub对安全团队和企业网络发动攻击https://gbhackers.com/apt32-turns-github-into-a-weapon-against-security-teams/
发布时间: 2025 - 04 - 14
查看详情 >>
友情连接:
免费服务热线 ree service hotline 400-613-1868 手机端
法律声明 Copyright  西安交大捷普网络科技有限公司  陕ICP备18022218号-1

陕公网安备 61019002000857号
犀牛云提供云计算服务