Aggregator

error code: 521

A new variant of Cicada ransomware targets VMware ESXi systems Pierluigi Paganini September 02

A vulnerability was found in Ibotta Better than Coupons 2.5.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is known as CVE-2014-5827. Access to the local network is required for this attack. There is no exploit available.

Name: BlackHat MEA CTF Qualification 2024 (an Blackhat MEA CTF event.)
Date: Sept. 1, 2024, 10 a.m. — 02 Sept. 2024, 09:59 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://blackhatmea.com/capture-the-flag
Rating weight: 25.00
Event organizers: SAFCSP

Interior view of workers at one of the steel processing plants in Hamilton, circa 1920. (MIKAN 4915719) - Image Courtesy of Library and Archives Canada (LAC).

Permalink

The post Happy Canada Labour Day! / Bonne Fête du Travail Canadienne! appeared first on Security Boulevard.

Labor Day 2024 - Three Day Weekend Edition!

Permalink

The post Happy United States Labor Day 2024 / Feliz Fin de Semana del Día del Trabajo de Estados Unidos 2024 / Joyeux Fin de Semaine de la Fête du Travail aux États-Unis 2024 appeared first on Security Boulevard.

Cybercrime / CISO InsightsThe FBI and CISA Issue Joint Advisory on New Threats and How to Stop Ran

一时间有近五个月没有新文章了，实在有些不太勤奋。写作虽不是我的本职但也算是爱好，需要输出就自然需要思考，能让不那么在转动的头脑再转上几圈。近期一面确稍有些腾不开手，另一面虽没有新文，也仍稍调了一下

error code: 521

A vulnerability has been found in Enigma Haber and classified as critical. Affected by this vulnerability is an unknown functionality of the file yazdir.asp. The manipulation of the argument \hid\ leads to sql injection. This vulnerability is known as CVE-2006-2731. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in Lykoszine Lykos Reviews Module 1.00. This issue affects some unknown processing of the file index.php. The manipulation of the argument uid leads to sql injection. The identification of this vulnerability is CVE-2007-1817. The attack may be initiated remotely. Furthermore, there is an exploit available.

一项新研究显示，一种在废弃食物上生长的霉菌可以彻底改变食物的味道，使原本要被丢弃的食物以新的形式被食用。间型脉孢菌是一种从豆浆生产废料中培养出来的橙色真菌，几个世纪以来，一直被用于制作印度尼西亚爪哇的传统食品oncom。加州伯克利的研究人员和纽约和丹麦哥本哈根米其林星级餐厅的厨师合作，利用这种真菌开发了新食物。这些新菜品现在出现在餐厅的菜单上，包括一种由陈面包制成的奶酪味烤面包和一种由无糖米羹制成的甜点。全球约 1/3 的粮食被浪费，废弃农产品约占温室气体排放量的 8%。研究人员表示将其重新利用变为可食用的新型食物，可以通过转移废物来减少粮食生产对气候的影响，同时也可以提高粮食安全。这种真菌可以在大约 36 小时内将难以消化的植物废物转化为营养丰富的食物。

都2024年了，CFI部署得怎么样了？还是不太行~

A vulnerability was found in Rix GO Locker Theme 1.20.2. It has been classified as critical. Affected is an unknown function of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is traded as CVE-2014-5826. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in REDCap 14.7.0. This issue affects some unknown processing of the file index.php?logout=1 of the component New Project Action Handler. The manipulation of the argument project title leads to basic cross site scripting. The identification of this vulnerability is CVE-2024-45527. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in CodeAstro Membership Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file add_members.php. The manipulation of the argument fullname leads to cross site scripting. This vulnerability was named CVE-2024-45528. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in DN Popup Plugin up to 1.2.2 on WordPress and classified as problematic. This issue affects some unknown processing of the component Setting Handler. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2024-7690. The attack may be initiated remotely. There is no exploit available.