Aggregator

CVE-2023-1018 | TCG TPM2.0 Module Library CryptParameterDecryption out-of-bounds (Nessus ID 277370 / WID-SEC-2023-0529)

Vuldb Updates
1 month 2 weeks ago
A vulnerability has been found in TCG TPM2.0 Module Library and classified as problematic. This issue affects the function CryptParameterDecryption. Performing manipulation results in out-of-bounds read. This vulnerability was named CVE-2023-1018. The attack needs to be approached within the local network. There is no available exploit.
vuldb.com

CVE-2022-30786 | Tuxera NTFS-3G up to 2021.8.22 NTFS Image ntfs_names_full_collate heap-based overflow (GHSA-xchm-ph5h-hw4x / EUVD-2022-52609)

Vuldb Updates
1 month 2 weeks ago
A vulnerability categorized as critical has been discovered in Tuxera NTFS-3G up to 2021.8.22. This affects the function ntfs_names_full_collate of the component NTFS Image Handler. Executing manipulation can lead to heap-based buffer overflow. The identification of this vulnerability is CVE-2022-30786. The attack needs to be done within the local network. There is no exploit available.
vuldb.com

CVE-2022-30788 | Tuxera NTFS-3G up to 2021.8.22 NTFS Image ntfs_mft_rec_alloc heap-based overflow (GHSA-xchm-ph5h-hw4x / EUVD-2022-52611)

Vuldb Updates
1 month 2 weeks ago
A vulnerability identified as critical has been detected in Tuxera NTFS-3G up to 2021.8.22. This impacts the function ntfs_mft_rec_alloc of the component NTFS Image Handler. The manipulation leads to heap-based buffer overflow. This vulnerability is referenced as CVE-2022-30788. The attack needs to be initiated within the local network. No exploit is available.
vuldb.com

CVE-2022-30789 | Tuxera NTFS-3G up to 2021.8.22 NTFS Image ntfs_check_log_client_array heap-based overflow (GHSA-xchm-ph5h-hw4x / EUVD-2022-52612)

Vuldb Updates
1 month 2 weeks ago
A vulnerability labeled as critical has been found in Tuxera NTFS-3G up to 2021.8.22. Affected is the function ntfs_check_log_client_array of the component NTFS Image Handler. The manipulation results in heap-based buffer overflow. This vulnerability is identified as CVE-2022-30789. The attack can only be performed from the local network. There is not any exploit available.
vuldb.com

CVE-2022-30784 | Tuxera NTFS-3G up to 2021.8.22 NTFS Image ntfs_get_attribute_value heap-based overflow (GHSA-xchm-ph5h-hw4x / EUVD-2022-52607)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Tuxera NTFS-3G up to 2021.8.22. It has been rated as critical. The impacted element is the function ntfs_get_attribute_value of the component NTFS Image Handler. Performing manipulation results in heap-based buffer overflow. This vulnerability was named CVE-2022-30784. The attack needs to be approached within the local network. There is no available exploit.
vuldb.com

CVE-2017-13055 | tcpdump up to 4.9.1 ISO IS-IS Parser print-isoclns.c isis_print_is_reach_subtlv memory corruption (Nessus ID 103257 / ID 370625)

Vuldb Updates
1 month 2 weeks ago
A vulnerability has been found in tcpdump up to 4.9.1 and classified as critical. This affects the function isis_print_is_reach_subtlv of the file print-isoclns.c of the component ISO IS-IS Parser. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2017-13055. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.
vuldb.com

CVE-2017-13048 | Apple macOS up to 10.13.1 tcpdump memory corruption (HT208221 / Nessus ID 100472)

Vuldb Updates
1 month 2 weeks ago
A vulnerability described as critical has been identified in Apple macOS up to 10.13.1. This issue affects some unknown processing of the component tcpdump. Such manipulation leads to memory corruption. This vulnerability is listed as CVE-2017-13048. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.
vuldb.com

CVE-2017-13050 | Apple macOS up to 10.13.1 tcpdump memory corruption (HT208221 / Nessus ID 100472)

Vuldb Updates
1 month 2 weeks ago
A vulnerability classified as critical was found in Apple macOS up to 10.13.1. The affected element is an unknown function of the component tcpdump. Executing manipulation can lead to memory corruption. This vulnerability is registered as CVE-2017-13050. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
vuldb.com

CVE-2017-13055 | Apple macOS up to 10.13.1 tcpdump memory corruption (HT208221 / Nessus ID 100472)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Apple macOS up to 10.13.1. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component tcpdump. Performing manipulation results in memory corruption. This vulnerability is known as CVE-2017-13055. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.
vuldb.com

Akira

Dark Feed IO
1 month 2 weeks ago

You must login to view this content

cohenido

Akira

Dark Feed IO
1 month 2 weeks ago

You must login to view this content

cohenido

AI 时代精英更容易操控民意

Solidot
1 month 2 weeks ago
民主政策的制定离不开公众支持，政策只有在足够多人的支持下才能推行实施。民意的倾向对民主社会的精英执政至关重要。在传统上，精英主要通过学校教育和大众媒体等有限手段引导舆论塑造有利于自身的民意。这些手段粗糙、耗费的时间漫长，调整方向非常困难，因此塑造民意说服公众的代价十分昂贵。现代 AI 的普及正在改变这一状况，它大幅降低了说服公众的成本，大幅提高了塑造民意的精准度，能快速进行调整，甚至能为每位公众进行定制，让民意变成一种可操纵的对象。芝加哥大学 Knowledge Lab 的研究员在预印本平台 arxiv 上发表论文，探讨了 AI 时代精英如何操控民意。研究发现，极化整个社会对精英的统治最为有利。高度极化的社会有利于降低未来调整预期成本所需的成本，而 AI 降低说服成本则有助于加速极化。单一精英阶层执政的政权会加速极化，如果有两个互相竞争的精英阶层，结果则可能有所不同。

CISA Warns of OpenPLC ScadaBR File Upload Vulnerability Exploited in Attacks

Cyber Security News
1 month 2 weeks ago

Critical vulnerability has been added to CISA’s Known Exploited Vulnerabilities list, warning organizations about a dangerous file-upload flaw in OpenPLC ScadaBR systems. The vulnerability allows remote authenticated users to upload and execute arbitrary JSP files through the view_edit.shtm interface, creating a significant risk for industrial control system environments. OpenPLC ScadaBR File Upload Vulnerability OpenPLC ScadaBR, […]

The post CISA Warns of OpenPLC ScadaBR File Upload Vulnerability Exploited in Attacks appeared first on Cyber Security News.

Abinaya

Dangerous RCE Flaw in React, Next.js Threatens Cloud Environments, Apps

Security Boulevard
1 month 2 weeks ago

Security and developer teams are scrambling to address a highly critical security flaw in frameworks tied to the popular React JavaScript library. Not only is the vulnerability, which also is in the Next.js framework, easy to exploit, but React is widely used, including in 39% of cloud environments.

The post Dangerous RCE Flaw in React, Next.js Threatens Cloud Environments, Apps appeared first on Security Boulevard.

Jeffrey Burt

Managed ad