erjinzhi 10OA 代码注入漏洞

erjinzhi 10OA is an enterprise automation system from China Binary erjinzhi. A code injection vulnerability exists in erjinzhi 10OA version 1.0, which stems from an incorrect manipulation of the parameter Name in the file /trial/mvc/finder, and could lead to a cross-site scripting attack...

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items...

Between a Rock and a Hard Place: Exploiting Ethical Reasoning to Jailbreak LLMs

Large language models LLMs have undergone safety alignment efforts to mitigate harmful outputs. However, as LLMs become more sophisticated in reasoning, their intelligence may introduce new security risks. While traditional jailbreak attacks relied on singlestep attacks, multi-turn jailbreak...

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-21028

Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-21028

CVE-2025-21028 affects Samsung Mobile ThemeManager. Due to improper privilege management, a local attacker with low privileges can reuse trial items. The fix is to apply the SMR Sep-2025 Release 1 update for ThemeManager (Samsung Mobile firmware). Multiple sources (Red Hat, NVD, CVE lists, PT Sec...

PT-2025-35682

Name of the Vulnerable Software and Affected Versions: ThemeManager versions prior to SMR Sep-2025 Release 1 Description: Improper privilege management in ThemeManager allows local privileged attackers to reuse trial items. Recommendations: Update ThemeManager to SMR Sep-2025 Release 1 or later...

Malicious code in test-mlw2-rivet-trial (npm)

The package test-mlw2-rivet-trial was found to contain malicious code...

MAL-2025-36122 Malicious code in test-mlw2-rivet-trial (npm)

The package test-mlw2-rivet-trial was found to contain malicious code...

Malicious code in snapchat-followers-free-90-day-trial201 (npm)

The package snapchat-followers-free-90-day-trial201 was found to contain malicious code...

MAL-2025-33501 Malicious code in snapchat-followers-free-90-day-trial201 (npm)

The package snapchat-followers-free-90-day-trial201 was found to contain malicious code...

MAL-2025-9007 Malicious code in @malware-test-thump-trial-tumid-maise/test-mlw3-thump-trial-tumid-maise (npm)

The package @malware-test-thump-trial-tumid-maise/test-mlw3-thump-trial-tumid-maise was found to contain malicious code...

Meta execs pay the pain away with $8 billion privacy settlement

Meta chief Mark Zuckerberg and several other members of the social media giant's top brass agreed to settle increasingly heated privacy violation claims for the price of $8 billion. It is far from the first time that the company, its subsidiary Facebook, or its executives have responded to allege...

CVE-2025-20985

Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-20985

Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-20985

Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-20985

Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items...

CVE-2025-20985

Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items...