Aggregator

A vulnerability was found in LDS Crypt::CBC up to 3.04 on Perl. It has been declared as problematic. This vulnerability affects the function rand. The manipulation leads to cryptographically weak prng. This vulnerability was named CVE-2025-2814. The attack can be initiated remotely. There is no exploit available.

NetSupport RAT远控样本分析

一个小小的整数溢出，竟可能引发整个推理服务的崩溃！

一个小小的整数溢出，竟可能引发整个推理服务的崩溃！

美关税系统突发故障，持续超 10 小时方才恢复；4600 万次下载：ChatGPT 成 3 月全球最受欢迎非游戏类应用

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. How it works AutoTimeline automates this workflow: Identify the correct volatility profile for the memory image. Runs the timeliner plugin against volatile memory dump using volatility. Runs the mftparser volatility...

The post autotimeliner: Automagically extract forensic timeline from volatile memory dump appeared first on Penetration Testing Tools.

STRIDE GPT STRIDE GPT is an AI-powered threat modeling tool that leverages OpenAI’s GPT models to generate threat models and attack trees for a given application based on the STRIDE methodology. Users provide application...

The post STRIDE GPT: An AI-powered threat modeling tool appeared first on Penetration Testing Tools.

本书分析当前反间谍斗争的形势和任务，介绍间谍活动的形式、特点和规律，阐述反间谍工作的意义和重要作用，同时面向社会公众，提出全民反间防谍、维护国家安全的对策建议。

关税幕后推手的婚姻也有点乱。

Apache Mina 是一款基于 Java 的高性能网络应用框架，其核心功能在于简化复杂网络通信的开发流程，同时确保具备可扩展性与高效性。

A vulnerability was found in perfectwpthemes Glaze Blog Lite, Fascinate, Cream Blog and Cream Magazine on WordPress and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2023-28687. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Wireshark up to 4.0.13/4.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component T.38 Dissector. The manipulation leads to mismatched memory management routines. This vulnerability is known as CVE-2024-2955. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Microsoft Windows 8/8.1/10/11. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Unicode Handler. The manipulation leads to resource consumption. This vulnerability is known as CVE-2017-20190. The attack can be launched remotely. Furthermore, there is an exploit available. The real existence of this vulnerability is still doubted at the moment.

A vulnerability, which was classified as problematic, was found in Supermicro X11SSM-F, X11SAE-F and X11SSE-F 1.66. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2023-40288. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Supermicro X11SSM-F, X11SAE-F and X11SSE-F 1.66. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2023-40285. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Supermicro X11SSM-F, X11SAE-F and X11SSE-F 1.66 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2023-40290. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Supermicro X11SSM-F, X11SAE-F and X11SSE-F 1.66 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2023-40284. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Supermicro X11SSM-F, X11SAE-F and X11SSE-F 1.66. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2023-40286. It is possible to initiate the attack remotely. There is no exploit available.