Aggregator

A vulnerability, which was classified as critical, was found in MySQL up to 4.0.23. This affects the function dispatch_command of the file sql_parse.cc. The manipulation leads to format string. This vulnerability is uniquely identified as CVE-2009-2446. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

iPhone 18 Pro 将首发苹果第二代 5G 基带，替代高通； 谷歌称其 PaliGemma 2 人工智能模型可识别情绪； 特斯拉 Model Q 将上市，入门车型补贴后或低于 3 万美元

A vulnerability classified as problematic was found in BitchX IRC Client up to 1.0c16. Affected by this vulnerability is an unknown functionality of the component Invite Handler. The manipulation leads to denial of service. This vulnerability is known as CVE-2000-0594. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Spring Security OAuth up to 2.0.16/2.1.3/2.2.3/2.3.4. Affected by this issue is some unknown functionality of the component Authorization Endpoint. The manipulation of the argument redirect_uri leads to open redirect. This vulnerability is handled as CVE-2019-3778. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Ghlab Korean GHBoard. This affects an unknown part of the file component/upload.jsp of the component File Upload. The manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2007-5737. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

伪装成ToDesk安装程序加载后门盗取数字货币

A vulnerability, which was classified as critical, has been found in VICIDIAL 2.7/2.8. This issue affects some unknown processing of the file manager_send.php. The manipulation of the argument extension leads to command injection. The identification of this vulnerability is CVE-2013-4468. The attack may be initiated remotely. Furthermore, there is an exploit available.

12月10日 14:00，OneSEC信创版发布

(Re)Building the Ultimate Homelab NUC Cluster - Part 2

A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some unknown processing of the file /jeewms_war/webpage/system/druid/index.html of the component Druid Monitoring Interface. The manipulation leads to improper authorization. The identification of this vulnerability is CVE-2024-12347. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in Avaya S8300 R2.0.0/R2.0.1 and classified as critical. Affected by this vulnerability is the function binfmt_aout in the library load_elf_library. The manipulation leads to memory corruption. This vulnerability is known as CVE-2004-1235. Local access is required to approach this attack. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

How to wipe a school issued laptop

The HackerNoon Newsletter: Deno vs Oracle: Who Really Owns JavaScript? (12/8/2024)

实现合规性管理，保障数据安全性，保证业务连续性。

Enterprise 2024 will incorporate multiple, smaller emulations for a more nuanced and targeted evaluation of defensive capabilities. We’re excited to offer two distinct adversary focus areas: Ransomware targeting Windows and Linux, and the Democratic People's Republic of Korea's targeting macOS.

It is a live blog post of some knowledge snippets of AI to bridge the gap among text books, papers, other blog posts. Most content has been posted on my Linkedin.