Aggregator

第四届“长城杯”网络安全大赛 暨京津冀网络安全技能竞赛（初赛） Web&Misc 题解WriteUp全

第四届长城杯网络安全大赛暨京津冀网络安全技能竞赛初赛PWN方向部分题解

今日暂未更新资讯~
更多最新文章，请访问SecWiki

A vulnerability has been found in GPL PHP Board unstable-2001.11.14-1 and classified as critical. This vulnerability affects unknown code of the file db.mysql.inc.php of the component mysqli. The manipulation of the argument theme leads to file inclusion. This vulnerability was named CVE-2007-2204. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in TVBengali Open Directory 1.4. Affected by this vulnerability is an unknown functionality of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is known as CVE-2014-5979. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability classified as critical has been found in Ipposan memetan 1.1.0. Affected is an unknown function of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is traded as CVE-2014-5978. Access to the local network is required for this attack. There is no exploit available.

A vulnerability was found in Cisco IOS 11.1/11.2/11.3. It has been classified as very critical. This affects an unknown part of the component TFTP Server. The manipulation of the argument filename leads to memory corruption. This vulnerability is uniquely identified as CVE-2002-0813. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in SourceCodester Online Bank Management System and Online Bank Management System - 1.0. It has been classified as problematic. This affects an unknown part of the file /mfeedback.php of the component Feedback Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-8583. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Food Ordering Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument description leads to cross site scripting. This vulnerability is handled as CVE-2024-8582. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Loway QueueMetrics and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to http request smuggling. This vulnerability is known as CVE-2024-42342. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Loway QueueMetrics. Affected is an unknown function. The manipulation leads to open redirect. This vulnerability is traded as CVE-2024-42341. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Loway QueueMetrics. This issue affects some unknown processing. The manipulation leads to observable response discrepancy. The identification of this vulnerability is CVE-2024-42343. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

Submit #404611 / VDB-276819

A vulnerability was found in Mobile Face 0.74.13432.91159. It has been rated as critical. This issue affects some unknown processing of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. The identification of this vulnerability is CVE-2014-5977. The attack needs to be initiated within the local network. There is no exploit available.

Submit #404604 / VDB-276818

A vulnerability classified as critical has been found in tcpdump up to 4.9.1. Affected is the function isis_print_id of the file print-isoclns.c of the component ISO IS-IS Parser. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2017-13035. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in alibaba 4.1.0.0. It has been declared as critical. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability was named CVE-2014-5976. The attack needs to be done within the local network. There is no exploit available.

Authors/Presenters:Andreas Kogler, Jonas Juffinger, Lukas Giner, Lukas Gerlach, Martin Schwarzl, Michael Schwarz, Daniel Gruss, Stefan Mangard

Many thanks to USENIX for publishing their outstanding USENIX Security ’23 Presenter’s content, and the organizations strong commitment to Open Access. Originating from the conference’s events situated at the Anaheim Marriott; and via the organizations YouTube channel.

Permalink

The post USENIX Security ’23 – Collide+Power: Leaking Inaccessible Data with Software-based Power Side Channels appeared first on Security Boulevard.

A vulnerability classified as very critical was found in Apple macOS up to 10.13.1. Affected by this vulnerability is an unknown functionality of the component tcpdump. The manipulation leads to memory corruption. This vulnerability is known as CVE-2017-13034. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.