Aggregator

にししふぁくとりーが提供するてがろぐ -Fumy Otegaru Memo Logger-には、制限が不十分な正規表現を使用している脆弱性が存在します。

前两天在公众号发了新文章，炸出来很多的老朋友，本来今天想说把文章同步到个人博客。 但我真到可能是年纪大了，越来越懒了，🤣 想到以后都要同步到话，实在是有点。 把我的公众号贴出来吧，有兴趣的可以关注下，后续万一有事，来公众号找我吧。

2026年7月9日至13日，在前沿 AI 实验室的一次例行模型评估过程中， 一个被评估的 AI Agent 从受限的 OpenAI 评估沙箱中逃逸，经由第三方被入侵的沙箱作为跳板， 最终渗透进入 Hugging Face 的生产环境，并成功横向移动至内部网络和源代码控制系统。

The Apache Software Foundationから、Apache Tomcatの脆弱性（CVE-2026-66299）に対してアドバイザリが公開されました。

7 月 30 日下午，上海 EDA/IP 沙龙第十三期——7 月 RISC-V 专场将在上海浦东·集鼎天地举行，主题为"RISC-V + DSA 赋能多垂直领域探索落地"。纽创信安将带来专题分享《当芯片设计遇见量子威胁：PQC IP 的防御之道》，深入上述架构思路与工程实践。

8月8日，“AI时代企业安全治理”主题沙龙将在深圳开展，本次沙龙由深圳市网络与信息安全行业协会作为指导单位，由

A vulnerability has been found in D-Link DI-8003 16.07.26A1 and classified as critical. Impacted is an unknown function of the file qos.asp. This manipulation of the argument wans causes buffer overflow. This vulnerability is tracked as CVE-2025-50647. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in D-Link DI-8003 16.07.26A1 and classified as critical. The affected element is an unknown function of the file /tggl.asp. Such manipulation leads to buffer overflow. This vulnerability is listed as CVE-2025-50648. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in D-Link DI-8003 16.07.26A1. It has been classified as critical. The impacted element is an unknown function of the file /shut_set.asp. Performing a manipulation of the argument vlan_name results in buffer overflow. This vulnerability is cataloged as CVE-2025-50649. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in D-Link DI-8003 16.07.26A1. It has been declared as critical. This affects an unknown function of the file /router.asp. Executing a manipulation of the argument routes_static can lead to buffer overflow. This vulnerability is registered as CVE-2025-50650. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in D-Link DI-8003 16.07.26A1. It has been rated as critical. This impacts an unknown function of the file /saveparm_usb.asp. The manipulation of the argument ID leads to buffer overflow. This vulnerability is documented as CVE-2025-50652. The attack can be initiated remotely. There is not any exploit available.

A vulnerability categorized as critical has been discovered in D-Link DI-8003 16.07.26A1. Affected is an unknown function of the file /time_group.asp. The manipulation of the argument mem results in buffer overflow. This vulnerability is reported as CVE-2025-50653. The attack can be launched remotely. No exploit exists.

A vulnerability identified as critical has been detected in D-Link DI-8003 16.07.26A1. Affected by this vulnerability is an unknown functionality of the file /thd_member.asp. This manipulation of the argument ID causes buffer overflow. This vulnerability appears as CVE-2025-50654. The attack may be initiated remotely. There is no available exploit.

A vulnerability labeled as critical has been found in D-Link DI-8003 16.07.26A1. Affected by this issue is some unknown functionality of the file /trace.asp. Such manipulation of the argument pid leads to buffer overflow. This vulnerability is traded as CVE-2025-50657. The attack may be launched remotely. There is no exploit available.

A vulnerability marked as critical has been reported in D-Link DI-8003 16.07.26A1. This affects an unknown part of the file /user.asp. Performing a manipulation of the argument custom_error results in buffer overflow. This vulnerability is known as CVE-2025-50659. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability described as critical has been identified in D-Link DI-8003 16.07.26A1. This vulnerability affects unknown code of the file /url_member.asp. Executing a manipulation of the argument Name can lead to buffer overflow. This vulnerability is handled as CVE-2025-50660. The attack can be executed remotely. There is not any exploit available.

A vulnerability classified as critical has been found in D-Link DI-8003 16.07.26A1. This issue affects some unknown processing of the file /thd_group.asp. The manipulation of the argument Name leads to buffer overflow. This vulnerability is uniquely identified as CVE-2025-50655. The attack is possible to be carried out remotely. No exploit exists.

2026年8月1日至8月21日，Capture The Flaw，等你来战

PR #7695 没有合并；公开 SeeAlso 路线省去了 FNV 碰撞，却增加了业务类型和类加载器条件。