Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from improper handling of symbolic links and could result in an...

The vulnerability of the check_alu_op() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the checkaluop function in the Linux operating system’s kernel is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Why Early Threat Detection Is a Must for Long-Term Business Growth

In cybersecurity, speed isn't just a win — it's a multiplier. The faster you learn about emerging threats, the faster you adapt your defenses, the less damage you suffer, and the more confidently your business keeps scaling. Early threat detection isn't about preventing a breach someday: it's abo...

The vulnerability of the Security Management System component of the Oracle Financial Services Revenue Management and Billing system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security Management System component of the Oracle Financial Services Revenue Management and Billing system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...

The vulnerability of the MFlash file-sharing platform, related to insufficient protection of operational data, allows a hacker to disclose the protected information.

The vulnerability of the MFlash file-sharing platform is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the microprogramming software of the RUGGEDCOM RST2428P routing and switching platform, due to the lack of protection for service data, allows attackers to disclose confidential information.

The vulnerability of the microprogramming software in the RUGGEDCOM RST2428P routing and switching platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose confidential information...

The vulnerability of the MFlash file-sharing platform, related to insufficient protection of operational data, allows a hacker to disclose the protected information.

The vulnerability of the MFlash file-sharing platform is related to insufficient protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the dma-direct component in the Linux operating system’s kernel allows a hacker to gain access to confidential information.

The vulnerability of the dma-direct component in the Linux operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the Mattermost instant messaging application, related to insufficient protection of sensitive data, allows a perpetrator to carry out a brute-force attack.

The vulnerability of the Mattermost instant messaging application is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack remotely...

PT-2025-43504

Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description A flaw in the Android Framework component allows a remote attacker to cause a persistent denial of service through resource exhaustion. The issue exists in the onHeaderDecoded...

PT-2025-43462

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A security issue exists in the Android Framework that could allow a remote attacker to escalate privileges. The issue involves a permissions bypass that may allow launching activities from th...

PT-2025-43506

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue resides in the hasAccountsOnAnyUser function within DevicePolicyManagerService.java. A logic error in the code allows for the addition of a Device Owner after provisioning. This can...

EUVD-2025-35350

The PixelYourSite – Your smart PIXEL TAG & API Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 11.1.2. This is due to missing or incorrect nonce validation on the adminEnableGdprAjax function. This makes it possible for unauthenticate...

WordPress plugin PixelYourSite 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

WordPress Cookie Notice & Compliance for GDPR / CCPA plugin <= 2.5.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Peter Thaleikis in WordPress Plugin Cookie Notice & Compliance for GDPR / CCPA versions = 2.5.8...

The vulnerability of the Legacy Chat component in the software solution for managing contact centers, MiContact Center Business, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Legacy Chat component in the software solution for managing contact centers, MiContact Center Business, is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to insufficient protection of operational data, allows a violator to disclose protected information.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

The vulnerability of the NTLM component of Windows operating systems, which allows attackers to perform spoofing attacks

The vulnerability of the NTLM component in Windows operating systems is related to insufficient protection for service data. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability of the Windows operating system’s kernel allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Windows File Explorer driver on Windows operating systems, allowing attackers to perform spoofing attacks

The vulnerability of the Windows File Explorer in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...