开发者

submitted by /u/laptou [link] [留言]

Amid ongoing economic anxieties, BLK and other companies are giving away basic essentials to appeal to the public.

Is there a system that can handle this? Handling units where one row in the DB can have both pieces and kg ex. HU Code 001; Article PART1; Lot code ABC; Location X; tracking qty 5pc; base qty 200kg Loose lot ex. Article PART2; Lot code XYZ; Location Y; tracking qty 100pc; base qty 2000kg This should be configurable per article family and inherited in the article... So i can have a part of articles in HU and part in loose lot... both carying 2 inventory unit of measurments.. submitted by /u/dirtyfrank22 [link] [留言]

🚨 URGENT: Highly Critical Drupal Core SQL Injection (CVE-2026-9082) Affecting PostgreSQL — Patch Immediately! The Drupal Security Team has released a "Highly Critical" security advisory ( SA-CORE-2026-004 / CVE-2026-9082 ) fixing a severe unauthenticated SQL injection vulnerability in Drupal Core. If you are running a Drupal site backed by a PostgreSQL database, you are at extreme risk. 📌 Vulnerability Overview CVE ID: CVE-2026-9082 Drupal Risk Score: 23/25 (Highly Critical) Attack Vector: Remote, Unauthenticated (Anonymous) HTTP requests Exploitation Status: ACTIVE IN-THE-WILD ATTACKS reported globally. CISA has officially added this flaw to its Known Exploited Vulnerabilities (KEV) catalog. Over 15,000 attack probes across thousands of sites have already been detected. Root Cause: A flaw in Drupal Core's database abstraction API—specifically within the PostgreSQL EntityQuery condition handler. Attacker-controlled PHP array keys reach SQL placeholder construction without proper sanitization, allowing arbitrary SQL execution. 💥 High Impact & Risks While Drupal estimates that less than 5% of installations use PostgreSQL, this configuration is heavily concentrated in enterprise, government, and higher-education environments. Successful exploitation grants: Full Database Access: Exfiltration of session tokens, sensitive data, and password hashes. Privilege Escalation: Promotion of standard or anonymous sessions to Administrator. Remote Code Execution (RCE): In PostgreSQL environments where database permissions are misconfigured (e.g., allowing COPY FROM PROGRAM ), attackers can pivot from SQL injection to executing arbitrary shell commands on the host server. 🔍 Affected Versions The flaw impacts all supported Drupal Core branches configured with PostgreSQL, including some legacy branches: Drupal Core 8.9.0 through 10.4.9 Drupal Core 10.5.x before 10.5.10 Drupal Core 10.6.x before 10.6.9 Drupal Core 11.1.x before 11.1.10 Drupal Core 11.2.x before 11.2.12 Drupal Core 11.

I got passion and no money submitted by /u/Free-Ant-463 [link] [留言]

Article URL: https://www.ycombinator.com/companies/reflex/jobs Comments URL: https://news.ycombinator.com/item?id=48297116 Points: 0 # Comments: 0

PR exec says Govee "did not meet the standard required."

Cybercriminals used the Glassworm botnet to infect open source software projects with malware, and in turn hack the developers and companies that use that software.

Designed by Jony Ive and a host of ex-Cupertino colleagues, the Luce shows us what might have been had Apple made good on its $10 billion bet.

submitted by /u/Ekrof [link] [留言]