Aggregator

Ведомство сможет ограничивать звонки в рамках борьбы с мошенничеством.

A vulnerability was found in Admin Verbalize WP Plugin up to 1.0 on WordPress and classified as critical. This issue affects some unknown processing. The manipulation leads to unrestricted upload. The identification of this vulnerability is CVE-2024-49668. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Alexander De Ridder INK Official Plugin up to 4.1.2 on WordPress and classified as critical. This vulnerability affects unknown code. The manipulation leads to unrestricted upload. This vulnerability was named CVE-2024-49669. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in ReneeCussack 3D Work In Progress Plugin up to 1.0.3 on WordPress. This affects an unknown part. The manipulation leads to unrestricted upload. This vulnerability is uniquely identified as CVE-2024-49652. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in James Eggers Portfolleo Plugin up to 1.2 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. This vulnerability is handled as CVE-2024-49653. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in press. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-49751. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in Ecomerciar Woocommerce Custom Profile Picture Plugin up to 1.0 on WordPress. Affected by this vulnerability is an unknown functionality of the component Profile Picture Handler. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2024-49658. The attack can be launched remotely. There is no exploit available.

Google has announced it will soon allow organizations to create their own curated "Enterprise Web Store" of company-sanctioned browser extensions for Chrome and ChromeOS, aimed at improving productivity, security, and management for businesses. [...]

WarmCookie malware, aka BadSpace, spreads via malspam, malvertising and enables persistent access

本文介绍了EASM、CAASM、DRPS、CTEM四种攻击面管理的技术的核心点和适用场景，并提出了基于资产视图的精益安全体系建设想法

网络安全公司 Zscaler 披露，全球勒索软件事件增加了 18%，赎金支付和行业目标方面的发现令人震惊。

A vulnerability has been found in Linux Kernel 2.6.16.9 and classified as problematic. Affected by this vulnerability is the function do_tcp_setsockopt. The manipulation leads to numeric error. This vulnerability is known as CVE-2010-4165. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

使用测绘平台进行 C2 资产拓线 by ourren

谷堕大盗黑产组织最新攻击样本详细分析 by ourren

大模型安全 vs. 代码执行 by ourren

SecWiki周刊（第555期) by ourren

谈谈网络研究和工程方法 by ourren

探索Clang Static Analyzer：使用方法与源码解读 by ourren

什么是负责任的 Web 服务器扫描？ by Avenger

更多最新文章，请访问SecWiki

A vulnerability was found in Theme Horse Mags Plugin up to 1.1.6 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to improper control of filename for include/require statement in php program ('php remote file inclusion'). The identification of this vulnerability is CVE-2024-49701. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Revmakx Backup and Staging by WP Time Capsule Plugin up to 1.22.21 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to deserialization. This vulnerability was named CVE-2024-49684. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in ReneeCussack 3D Work In Progress Plugin up to 1.0.3 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2024-49657. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Michael Bourne Custom Icons for Elementor Plugin up to 0.3.3 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload. This vulnerability is handled as CVE-2024-49676. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in HCL Sametime up to 12.0.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Legacy REST Service. The manipulation leads to cleartext transmission of sensitive information. This vulnerability is known as CVE-2024-30124. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Qode Interactive Qi Blocks Plugin up to 1.3.2 on WordPress. Affected is an unknown function of the file Include/Require. The manipulation leads to improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability is traded as CVE-2024-49690. It is possible to launch the attack remotely. There is no exploit available.