iKuai8 v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.
DedeCMS V5.7.99 was discovered to contain an arbitrary file upload vulnerability via the component /dede/file_manage_control.php.
Prototype pollution vulnerability in tschaub gh-pages 3.1.0 via the partial variable in util.js.
Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI < R18 Firmware v4.13.00. It does not properly validate requests for access to (or editing of) data and functionality in all endpoints under /#settings/* and /api/settings/*. By not verifying the permissions for access to resources, it allows a potential attacker to view pages, with sensitive data, that are not allowed, and modify system configurations also causing DoS, which should be accessed only by user with administration…
Не секрет, что мобильные браузеры часто сильно отличаются от своих десктопных вариаций в силу различных объективных причин. В связи с этим пользователям приходится не только переключаться между устройствами, но и между стилем работы с браузером. Мы стараемся сделать такое переключение максимально удобным, чему доказательство - наша новая стабильная версия Vivaldi 5.5 для Android. Читать далее
Большие языковые модели это конечно хорошо, но иногда требуется использовать что-то маленькое и быстрое. Читать далее
An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.
The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.
The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.
The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.