Aggregator
Weekoverzicht Defensieoperaties
1 year 1 month ago
Alle 3 de Chinook-transporthelikopters die in Irak opereerden zijn terug. Het laatste toestel arriveerde afgelopen week op Vliegbasis Gilze-Rijen. Hiermee is de terugkeer van het luchtmachtdetachement afgerond. Een overzicht van Defensieoperaties in de week van 16 tot met 22 april 2025.
学术前沿 | 南京航空航天大学董超教授团队:低空智联网平台安全态势认知系统与实现
1 year 1 month ago
限时4折!免费试看 | Frida 编译调试、框架学习及定制开发
1 year 1 month ago
Android 应用开发如火如荼,而深入了解其底层原理和掌握强大的工具,能让你在开发、测试以及安全分析等领域如
恶意 npm 包伪装 Telegram 库,Linux 开发者系统遭 SSH 后门入侵
1 year 1 month ago
恶意 npm 包伪装成 Telegram 机器人库,悄无声息地在 Linux 开发者系统中植入 SSH 后门,窃取敏感数据。
OLLVM控制流平坦化混淆还原
1 year 1 month ago
看雪论作者ID:九天666
CVE-2005-1782 | W.M.R. Simpson BookReview 1.0 Classification add_review.htm submit[string] cross site scripting (EDB-25731 / Nessus ID 18375)
1 year 1 month ago
A vulnerability has been found in W.M.R. Simpson BookReview 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add_review.htm of the component Classification. The manipulation of the argument submit[string] leads to basic cross site scripting.
This vulnerability is known as CVE-2005-1782. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2008-2002 | Motorola Surfboard Sb5100 configdata.html BUTTON_INPUT cross-site request forgery (VU#643049 / XFDB-42091)
1 year 1 month ago
A vulnerability was found in Motorola Surfboard Sb5100 and classified as critical. This issue affects some unknown processing of the file configdata.html. The manipulation of the argument BUTTON_INPUT leads to cross-site request forgery.
The identification of this vulnerability is CVE-2008-2002. The attack may be initiated remotely. There is no exploit available.
vuldb.com
CVE-2008-2043 | cPanel 11.18.3/11.19.3 command1 cross-site request forgery (VU#584089 / XFDB-42114)
1 year 1 month ago
A vulnerability classified as problematic has been found in cPanel 11.18.3/11.19.3. This affects an unknown part. The manipulation of the argument command1 leads to cross-site request forgery.
This vulnerability is uniquely identified as CVE-2008-2043. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVE-2008-0556 | OpenCA OpenCA PKI 0.9.2.5 access control (VU#264385 / XFDB-40476)
1 year 1 month ago
A vulnerability was found in OpenCA OpenCA PKI 0.9.2.5. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to improper access controls.
This vulnerability was named CVE-2008-0556. The attack can be initiated remotely. There is no exploit available.
vuldb.com
CVE-2008-0820 | Etomite 0.6.1.4 index.php _server cross site scripting (XFDB-40525 / BID-27794)
1 year 1 month ago
A vulnerability was found in Etomite 0.6.1.4. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument _server leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2008-0820. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
The real existence of this vulnerability is still doubted at the moment.
vuldb.com
CVE-2008-1502 | Moodle up to 1.8.4 _bad_protocol_once cross site scripting (Nessus ID 33459 / ID 116578)
1 year 1 month ago
A vulnerability has been found in Moodle and classified as problematic. This vulnerability affects the function _bad_protocol_once. The manipulation leads to cross site scripting.
This vulnerability was named CVE-2008-1502. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2008-1542 | Airspan Base Station Distribution Unit credentials management (VU#446403 / XFDB-41437)
1 year 1 month ago
A vulnerability, which was classified as critical, was found in Airspan Base Station Distribution Unit. This affects an unknown part. The manipulation leads to credentials management.
This vulnerability is uniquely identified as CVE-2008-1542. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com
CVSS 9.8!Yi IOT XY-3820 智能摄像头面临 root 权限失控危机
1 year 1 month ago
安全客
评论 | 多措并举整治网络“开盒”乱象
1 year 1 month ago
所谓网络“开盒”,也称“开盒挂人”,是一种新型网络暴力行为,即通过不当手段获取信息主体的个人及家庭隐私信息,包括但不限于其姓名、电话、身份证号等,并将其曝光于网络的行为,极易衍生出电话骚扰、语言攻击、恐吓威胁等违法行为。
评论 | 铲除网络低俗炒作乱象
1 year 1 month ago
中央网信办最近发布消息称,网信部门持续打击文娱领域“饭圈”乱象,督促网站平台依法依约关闭和长期禁言处置“超能摄影阳阳”“明星娱乐一线”等一批低俗炒作绯闻丑闻八卦的违法违规账号。
观点 | 如何应对大语言模型的法律风险
1 year 1 month ago
大语言模型对于培育和发展新质生产力、抓住新一轮科技革命和产业变革机遇而言有重要价值。与此同时,大语言模型也可能引发一系列风险,需要紧扣相关技术规律和产业特性,形成科学、系统、精准的治理思路,促成技术创新、产业发展与安全保障目标的融合实现。
前沿 | 构建自主体系对抗数据主权威胁
1 year 1 month ago
近期,NIH突然禁止了中国研究人员访问其部分关键数据库,美国新兴生物技术国家安全委员会也建议全面禁止与中国的生物技术与数据合作。这一系列举措表明,美国对华科技打压正迅速扩展至基础性科学数据的掌控与利用,科学数据主权问题的战略意义愈发凸显。
发布 | 工信部就《云计算综合标准化体系建设指南(2025版)(征求意见稿)》公开征求意见(附全文)
1 year 1 month ago
意见反馈截止日期为2025年5月22日前。
专题 | 2024年网络安全产业态势回顾及2025年趋势展望
1 year 1 month ago
2024年,在我国,央地协同推进网络安全产业发展,三股产业力量齐头并进,可能引发市场格局重新洗牌,网络安全产品加速向云化、服务化迭代升级。展望未来,我国网络安全产业发展动能有望提升,技术应用和创新生态愈发成熟,产业将迎来新的发展机遇。