Aggregator

A vulnerability has been found in Kanboard up to 1.2.36 and classified as critical. This vulnerability affects the function addUser of the file app/Controller/ProjectPermissionController.php of the component URL Parameter Handler. The manipulation of the argument project_id leads to improper access controls. This vulnerability was named CVE-2024-36399. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in gaizhenbiao chuanhuchatgpt. Affected by this vulnerability is an unknown functionality of the component History File Handler. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-3404. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as critical was found in gaizhenbiao chuanhuchatgpt. Affected by this vulnerability is an unknown functionality of the file web_assets. The manipulation leads to path traversal. This vulnerability is known as CVE-2024-3234. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in gaizhenbiao chuanhuchatgpt up to 20240121. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-3402. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in imartinez privategpt up to 0.5.0. Affected by this issue is some unknown functionality of the component Requests Handler. The manipulation of the argument path leads to server-side request forgery. This vulnerability is handled as CVE-2024-5186. The attack may be launched remotely. There is no exploit available.

盛邦安全

盛邦安全

A vulnerability classified as problematic has been found in DotNetNuke. Affected is an unknown function of the file Default.aspx. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2008-6644. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Salesforce's Einstein Copilot can provide insights and perform tasks help streamline daily processes. However, it also comes with risks that you should takes steps to mitigate. Learn more from Varonis on how to prepare for Salesforce Einstein Copilot, [...]

A vulnerability has been found in A10 Thunder ADC and classified as critical. This vulnerability affects the function CsrRequestView. The manipulation leads to command injection. This vulnerability was named CVE-2024-30368. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in A10 Thunder ADC. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to permission issues. This vulnerability is known as CVE-2024-30369. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in significant-gravitas AutoGPT up to 5.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. This vulnerability was named CVE-2024-1879. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

KELA launched Identity Guard, the first line of defense to help combat the #1 cause of data breaches – compromised corporate assets and identities. Identity Guard is a critical module of KELA’s threat intelligence platform, already in use by hundreds of customers, including government agencies, law enforcement and enterprises. As threat actors look for new ways to circumvent advanced Firewalls, EDRs, and other security controls, they increasingly turn to using valid corporate account credentials — … More →

The post KELA Identity Guard detects and intercepts compromised assets appeared first on Help Net Security.

Series C Funding to Fuel Generative AI Integration and AI-Powered Threat Detection
The funding will enhance generative AI technologies that streamline security operations and provide autonomous threat investigation, alongside plans for broader U.S. and European market penetration.

A sound cyber-risk management strategy analyzes all the business impacts that may stem from an attack and estimates the related costs of mitigation versus the costs of not taking action.

A vulnerability classified as critical has been found in Codewidgets Online Event Registration Template. This affects an unknown part of the file sign_in.aspx. The manipulation of the argument Password leads to sql injection. This vulnerability is uniquely identified as CVE-2007-4109. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

2024 CCF中国软件大会筹办工作推进系列【二十二】：并行论坛巡礼之软件定义汽车：基础软件与开发实践“