Aggregator

通过对现有vaadin反序列化链进行分析，结合tabby代码辅助审计工具，尝试对vaadin中新的反序列化链进行挖掘，并给出利用poc

递归请求5次则可以跳过权限校验

Lawsuits Allege Cybercrime Gang Medusa Stole Data of 132,000 People
An Arizona-based medical imaging practice with locations in 11 states is notifying patients that their data was compromised in a January cyberattack. Litigation filed against the company allege ransomware gang Medusa stole sensitive data pertaining to at least 132,000 people in the incident.

Inside North Korea's IT Scam Network Now Shifting to Europe
North Koreans posing as remote IT workers have spread to Europe, where one Pyongyang fraudster assumed at least 12 personas to target companies in Germany, Portugal and the United Kingdom. Western companies have grappled for years with the prospect of unintentionally hiring a North Korean national.

Integrated Tools Across Generative AI Security, DSPM, DDR Key to Growth Strategy
Cyberhaven is building a data security platform to address evolving risks in generative AI, DSPM and beyond. Backed by $100 million, CEO Howard Ting says the firm will use the funds to expand its portfolio and go-to-market footprint while staying independent.

Chinese Hackers Are Pre-Positioned, and Top Officials Could Be Making Matters Worse
Experts told lawmakers on Wednesday that without urgent federal action to strengthen cyber defenses and additional efforts to improve the cybersecurity practices of some of the highest ranking government officials, another Salt Typhoon attack could be just around the corner.

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

A vulnerability was found in Ofofonobs HubBank 1.0.2. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-4310. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in MailerLite Plugin 1.5.0/1.7.6 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-1386. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Where Did You Hear About Us Checkout Field for WooCommerce Plugin up to 1.3.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-2752. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in The R Project R up to 4.3.x and classified as critical. Affected by this issue is some unknown functionality of the component RDS Handler. The manipulation leads to deserialization. This vulnerability is handled as CVE-2024-27322. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Elementor Addon Elements Plugin up to 1.13.3 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-3743. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in WP Shortcodes Plugin up to 7.1.2 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Shortcode Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-3550. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Beekeeper Studio up to 4.1.13. Affected is an unknown function of the component Database Table Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-23995. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in JFinalCMS 5.0.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Friendship Link Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2023-51254. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in ARMember Plugin up to 4.0.30 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to open redirect. This vulnerability is handled as CVE-2024-4133. The attack may be launched remotely. There is no exploit available.

Threat Attack Daily - 2nd of April 2025

Password spraying attacks are becoming a serious threat, especially targeting Active Directory environments. These attacks enable attackers to exploit weak passwords and gain unauthorised access by applying login attempts across multiple accounts, making them difficult to detect. They also bypass account lockout mechanisms, causing significant risk to organisations. In this blog, we will detail how […]

The post How to defend against a password spraying attack? appeared first on Security Boulevard.

A vulnerability was found in SVS Pricing Tables Plugin up to 1.0.4 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Pricing Table Deletion. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2024-2960. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in SVS Pricing Tables Plugin up to 1.0.4 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-2958. It is possible to initiate the attack remotely. There is no exploit available.