AquilaCMS 路径遍历漏洞

AquilaCMS is a complete multipurpose open source CMS from the AquilaCMS team. A security vulnerability exists in AquilaCMS that stems from the OSAL module being susceptible to path traversal attacks...

VanHelsing RaaS Launch: 3 Victims, $5K Entry Fee, Multi-OS, and Double Extortion Tactics

A ransomware-as-a-service RaaS operation called VanHelsing has already claimed three victims since it launched on March 7, 2025, demanding ransoms as high as $500,000. "The RaaS model allows a wide range of participants, from experienced hackers to newcomers, to get involved with a $5,000 deposit...

Important Photon OS Security Update - PHSA-2025-5.0-91-0487

Updates of 'kubernetes', 'libarchive' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-90-0488

Updates of 'elfutils' packages of Photon OS have been released...

CVE-2024-11037

A path traversal vulnerability exists in binary-husky/gptacademic at commit 679352d, which allows an attacker to bypass the blockedpaths protection and read the config.py file containing sensitive information such as the OpenAI API key. This vulnerability is exploitable on Windows operating syste...

CVE-2024-9392 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2024-9602 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-92M3-M5PW-P2X9 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-8MXC-VQRQ-GCM8 vulnerabilities

Vulnerabilities for packages: jq...

Albabat Ransomware Group Potentially Expands Targets to Multiple OS, Uses GitHub to Streamline Operations

Trend Research encounters new versions of the Albabat ransomware, which appears to target Windows, Linux, and macOS devices. We also reveal the group’s use of GitHub to streamline their ransomware operation...

The vulnerability of the cifs_sync_mid_result() function in the fs/smb/client/transport.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cifssyncmidresult function in the fs/smb/client/transport.c module of the Linux operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

Wind River Systems VxWorks 安全漏洞

Wind River Systems VxWorks is an embedded real-time operating system from Wind River Systems USA. It is used in communications, military, aerospace, and other real-time demanding applications. A security vulnerability exists in Wind River Systems VxWorks 7 versions 22.06 through 24.03, which stem...

The vulnerability of the arena_map_mem_usage() function in the kernel/bpf/arena.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the arenamapmemusage function in the kernel/bpf/arena.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ax25_addr_ax25dev() function in the net/ax25/ax25_dev.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ax25addrax25dev function in the net/ax25/ax25dev.c module of the Linux operating system is related to a resource leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the is_dsc_need_re_compute() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_mst_types.c file of the driver support infrastructure for AMD graphics cards in Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the isdscneedrecompute function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmmsttypes.c file of the DRI support driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

CVE-2024-11037

A path traversal vulnerability exists in binary-husky/gptacademic at commit 679352d, which allows an attacker to bypass the blockedpaths protection and read the config.py file containing sensitive information such as the OpenAI API key. This vulnerability is exploitable on Windows operating syste...

CVE-2024-12217

CVE-2024-12217 affects the gradio-app/gradio project (commit git 67e4044). The flaw in the blocked_path implementation on Windows allows path traversal via NTFS Alternate Data Streams syntax (e.g., C:/tmp/secret.txt::$DATA), bypassing blocks that prevent access to restricted files and enabling re...

CVE-2024-11037

CVE-2024-11037 affects binary-husky/gpt_academic. A path traversal flaw at commit 679352d allows bypassing blocked_paths and reading config.py containing sensitive data (e.g., OpenAI API key). Exploitation is described as Windows-specific via a URL containing the project’s absolute path. No mitig...

CVE-2024-11037 Path Traversal in binary-husky/gpt_academic

A path traversal vulnerability exists in binary-husky/gptacademic at commit 679352d, which allows an attacker to bypass the blockedpaths protection and read the config.py file containing sensitive information such as the OpenAI API key. This vulnerability is exploitable on Windows operating syste...

CVE-2024-11037 Path Traversal in binary-husky/gpt_academic

A path traversal vulnerability exists in binary-husky/gptacademic at commit 679352d, which allows an attacker to bypass the blockedpaths protection and read the config.py file containing sensitive information such as the OpenAI API key. This vulnerability is exploitable on Windows operating syste...