Aggregator

吸尘器、洗地机、机器人……你都如何做好「日常清洁」？随着国补接近尾声，不少朋友在这期间购买了种草许久的吸尘器、洗地机、扫拖机器人等地面清洁工具，希望它们能在日常的家庭清洁中为自己省时省力。但工具类型这

Researchers have uncovered vulnerabilities in Microsoft Azure Data Factory’s integration with Apache Airflow, which could potentially allow attackers to gain unauthorized access and control over critical Azure resources.  By exploiting these vulnerabilities, attackers could compromise the integrity of the Azure environment, potentially leading to data breaches, service disruptions, and other severe consequences.  The identified vulnerabilities […]

The post Azure Data Factory And Apache Airflow Integration Flaws Let Attackers Gain Write Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

XRefer, an IDA Pro plugin, enhances binary analysis with a persistent companion view by employing Gemini-powered cluster analysis to decompose binaries into functional units, providing high-level architectural overviews akin to viewing a city’s districts.  Simultaneously, it offers a context-aware view that dynamically updates based on the analyst’s code location, which presents relevant artifacts from both […]

The post Google’s New XRefer Tool To Analyze More Complex Malware Samples appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Евросоюз беспокоит роль TikTok в изменении результатов выборов.

摩根大通网络安全专家警告：CVSS存在重大缺陷，可能导致安全团队对漏洞风险误判，从而延长漏洞的暴露时间，增加组织面临的风险。

Meta has been fined €251M ($263M) for a 2018 data breach affecting millions in the EU, marking another penalty for violating privacy laws. The Irish Data Protection Commission (DPC) fined Meta €251 million ($263M) for a 2018 data breach impacting 29 million Facebook accounts. “The Irish Data Protection Commission (DPC) has today announced its final […]

Irish Data Protection Commission (DPC) fined Meta €251 million for a 2018 data breach

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.11.2. This issue affects the function stream_status of the component AMD Display. The manipulation leads to state issue. The identification of this vulnerability is CVE-2024-49893. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.11.2. Affected by this vulnerability is the function dcn401_init_hw of the component AMD Display. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2024-49916. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.1.112/6.6.54/6.10.13/6.11.2. This affects the function amdgpu_dm_plane_handle_cursor_update of the component AMD Display. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2024-49905. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.92/6.6.32/6.8.11/6.9.2. Affected by this issue is the function xa_lock of the component RDMA. The manipulation leads to improper update of reference count. This vulnerability is handled as CVE-2024-38545. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.92/6.6.32/6.9.3 and classified as critical. This issue affects the function pt_regs of the component riscv. The manipulation leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2024-38667. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.93/6.6.33/6.9.4. This issue affects the function d_release in the library linux/./include/net/9p/client.h. The manipulation leads to use after free. The identification of this vulnerability is CVE-2024-39463. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 6.1.58/6.5.6. This affects an unknown part of the component mana. The manipulation leads to injection. This vulnerability is uniquely identified as CVE-2023-52532. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.8.1. It has been declared as critical. Affected by this vulnerability is the function usbtv_video_free of the component Media. The manipulation leads to deadlock. This vulnerability is known as CVE-2024-27072. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel and classified as critical. Affected by this issue is the function snd_usb_pcm_has_fixed_rate of the component ALSA. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2023-52904. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.90/6.6.30/6.8.9. It has been rated as critical. Affected by this issue is the function typec_register_partner. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2024-36893. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.1.86/6.8.6 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Bluetooth. The manipulation leads to memory corruption. This vulnerability is known as CVE-2024-35965. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.