Aggregator

亚马逊证实在第三方供应商发生安全事故后其员工信息遭到泄露。亚马逊表示它以及 AWS 是安全的，没有发生安全事故。亚马逊称它收到通知，其物业管理供应商发生了安全事故，影响亚马逊在内的多个客户，泄露的员工信息与工作相关，如工作电邮地址、办公桌电话号码和建筑位置。敏感信息如社会安全号码或财务信息未受影响。此前有黑客在论坛 BreachForums 发帖称拥有逾 280 万行从亚马逊窃取的数据，这些数据是在去年的 MOVEit Transfer 安全事件期间盗取的。

A vulnerability was found in Digistar AG-30 Plus 2.6b. It has been classified as problematic. Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of excessive authentication attempts. This vulnerability is traded as CVE-2024-11126. Access to the local network is required for this attack. There is no exploit available. The vendor was contacted early about this disclosure but did not respond in any way. It is recommended to apply restrictive firewalling. The vendor was contacted early about this disclosure but did not respond in any way.

Augmented reality use cases have become prevalent in our society.

The technology, which first emerged primarily in the world of gaming and entertainment, now promises to reshape our reality with interactive information and immersive experiences. In short, AR is undoubtedly … (more…)

The post GUEST ESSAY: The promise and pitfalls of using augmented reality– ‘AR’ — in cybersecurity first appeared on The Last Watchdog.

The post GUEST ESSAY: The promise and pitfalls of using augmented reality– ‘AR’ — in cybersecurity appeared first on Security Boulevard.

Submit #437096 / VDB-283974

A vulnerability was found in GetSimpleCMS 3.3.16 and classified as problematic. This issue affects some unknown processing of the file /admin/profile.php. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2024-11125. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

Хотите стать счастливым обладателем приставки? Мы готовы подарить ее одному из вас!

雷神众测拥有该文章的修改和解释权。如欲转载或传播此文章，必须保证此文章的副本，包括版权声明等全部内容。声明雷神众测允许，不得任意修改或增减此文章内容，不得以任何方式将其用于商业目的。

Submit #437090 / VDB-283973

Todo el mundo sabe instalar Kali Linux en VMWare o VirtualBox. O si también eres fiel seguidor del blog, también...

A vulnerability has been found in TimGeyssens UIOMatic 5 and classified as critical. This vulnerability affects unknown code of the file /src/UIOMatic/wwwroot/backoffice/resources/uioMaticObject.r. The manipulation leads to sql injection. This vulnerability was named CVE-2024-11124. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. This affects an unknown part of the file /crm/data/pdf.php. The manipulation of the argument url with the input ../config.inc.php leads to path traversal. This vulnerability is uniquely identified as CVE-2024-11123. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as critical, has been found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. Affected by this issue is some unknown functionality of the file /crm/wechatSession/index.php?msgid=1&operation=upload. The manipulation of the argument file leads to unrestricted upload. This vulnerability is handled as CVE-2024-11122. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. Affected by this vulnerability is an unknown functionality of the file /crm/WeiXinApp/marketing/index.php?module=Users&action=getActionList. The manipulation of the argument userid leads to sql injection. This vulnerability is known as CVE-2024-11121. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

FTX 破产资产清算团队对加密货币交易所币安及其前 CEO 赵长鹏提起诉讼，寻求追回 17.6 亿美元，指控 2021 年的一项“欺诈性”股票交易牵涉到了 FTX 已资不抵债的 Alameda Research 的资金。诉讼还指控赵长鹏在社媒上发布误导性帖子，鼓动了客户去挤兑导致 FTX 的倒闭。币安否认了相关指控，在一封电子邮件声明中称这些指控是毫无根据的，它将积极为自己辩护。

A vulnerability classified as critical has been found in Dell SmartFabric OS10 Software 10.5.4.x/10.5.5.x/10.5.6.x. Affected is an unknown function. The manipulation leads to command injection. This vulnerability is traded as CVE-2024-49560. Attacking locally is a requirement. There is no exploit available.

A vulnerability was found in Dell SmartFabric OS10 Software 10.5.4.x/10.5.5.x/10.5.6.x. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper privilege management. The identification of this vulnerability is CVE-2024-49558. Local access is required to approach this attack. There is no exploit available.

Форум в Сочи: новый взгляд на международную безопасность в Интернете.

A vulnerability was found in Dell SmartFabric OS10 Software 10.5.4.x/10.5.5.x/10.5.6.x. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to execution with unnecessary privileges. This vulnerability was named CVE-2024-48837. An attack has to be approached locally. There is no exploit available.

Submit #436677 / VDB-283971