Aggregator

Вместо революции — лишь осторожные шаги по кругу.

A vulnerability was found in LocalServer 1.0.9. It has been rated as problematic. This issue affects some unknown processing of the file /mlss/ManageSubscription. The manipulation of the argument MSubListName leads to cross site scripting. The identification of this vulnerability is CVE-2024-10289. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in LocalServer 1.0.9. It has been declared as problematic. This vulnerability affects unknown code of the file /mlss/SubscribeToList. The manipulation of the argument ListName leads to cross site scripting. This vulnerability was named CVE-2024-10288. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in LocalServer 1.0.9. It has been classified as problematic. This affects an unknown part of the file /mlss/ForgotPassword. The manipulation of the argument ListName leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-10287. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in LocalServer 1.0.9 and classified as problematic. Affected by this issue is some unknown functionality of the file /testmail/index.php. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-10286. The attack may be launched remotely. There is no exploit available.

Tor 项目释出了 Tor Browser 14.0。Tor Browser 14.0 是基于 Firefox ESR 128 的第一个稳定版。Firefox ESR 115 是 Mozilla 支持 Windows 7、8 和 8.1 的最后一个版本，将至少支持到 2025 年 3 月，而 Tor Browser 13 是基于 Firefox ESR 115，这意味着 Tor Browser 13.5 将是支持这些旧操作系统的最后一个版本。Tor 项目建议相关用户升级到新操作系统。

A vulnerability, which was classified as critical, was found in Smeego 1.0. This affects an unknown part of the file index.php. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2008-2352. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Wr-script WR-Meeting 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument msnum leads to path traversal. This vulnerability is traded as CVE-2008-2355. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Archangelmgt Archangel Weblog up to 0.90.02. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument post_id leads to sql injection. This vulnerability is known as CVE-2008-2356. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in FicHive 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument category leads to sql injection. This vulnerability is traded as CVE-2008-2416. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in How2ASP Webboard 4.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file showqanswer.asp. The manipulation of the argument qNo leads to sql injection. This vulnerability is known as CVE-2008-2417. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in Tpvgames MPCS 1.0/1.1. Affected is an unknown function of the file admin.php. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2008-2293. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in IMGallery 2.5 and classified as critical. This issue affects some unknown processing of the file galeria.php. The manipulation of the argument id_phot leads to sql injection. The identification of this vulnerability is CVE-2008-2337. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Zomplog 3.8.2. Affected is an unknown function of the component Admin Account. The manipulation of the argument admin leads to improper access controls. This vulnerability is traded as CVE-2008-2349. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

The number of DDoS attacks spiked in the third quarter of 2024. Cloudflare mitigated nearly 6 million DDoS attacks, representing a 49% increase QoQ and 55% increase YoY.

Identity security is front, and center given all the recent breaches that include Microsoft, Okta, Cloudflare and Snowflake to name a few. Organizations are starting to realize that a shake-up is needed in terms of the way we approach identity security both from a strategic but also a technology vantage point.  Identity security is more than just provisioning access  The conventional view

This post covers the threat of Kubernetes privilege escalation as well as the abuse potential of system pods within an attack chain.

The post Climbing The Ladder | Kubernetes Privilege Escalation (Part 1) appeared first on SentinelOne.

Среди задержанных оказался призрак без прописки и с большими связями.

In this post we will describe how we use anomaly detection to watch for novel DDoS attacks. We’ll provide an overview of how we build models which flag unusual traffic and keep our customers safe.