Aggregator

WordPress Depicter Plugin 3.6.1 - SQL Injection

SureTriggers OttoKit Plugin 1.0.82 - Privilege Escalation

VirtualBox 7.0.16 - Privilege Escalation

Apache ActiveMQ 6.1.6 - Denial of Service (DOS)

《网络安全技术 网络安全保险应用指南》将于11月1日正式实施。

《网络安全技术 网络安全保险应用指南》将于11月1日正式实施。

《网络安全技术 网络安全保险应用指南》将于11月1日正式实施。

随着 2024 年年报的发布，中国 21 家主要网络安全上市公司的员工人数数据出炉：去年行业整体裁员超 10%，总人数回落至 2021 年水平，但收入已跌回 2020 年水平。

随着 2024 年年报的发布，中国 21 家主要网络安全上市公司的员工人数数据出炉：去年行业整体裁员超 10%，总人数回落至 2021 年水平，但收入已跌回 2020 年水平。

This daily article is intended to make it easier for those who want to stay updated with my regular Dark Web Informer and X/Twitter posts.

Currently trending CVE - Hype Score: 1 - Craft is a content management system. Versions of Craft CMS on the 4.x branch prior to 4.14.13 and on the 5.x branch prior to 5.6.16 contains a potential remote code execution vulnerability via Twig SSTI. One must have administrator access and `ALLOW_ADMIN_CHANGES` must be ...

Threat Attack Daily - 8th of May 2025

Ransomware Attack Update for the 8th of May 2025

Alleged Sale of 2.3 Million California, USA Medical Records

The FBI warns that threat actors are deploying malware on end-of-life (EoL) routers to convert them into proxies sold on the 5Socks and Anyproxy networks. [...]

Alleged Sale of Booking CRM Access to 7 Unidentified Hotels in Mexico

A vulnerability has been found in Oracle Agile PLM 9.3.5/9.3.6 and classified as critical. This vulnerability affects unknown code of the component Security. The manipulation leads to improper access controls. This vulnerability was named CVE-2017-10082. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Agile PLM 9.3.5/9.3.6 and classified as critical. This issue affects some unknown processing of the component Security. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2017-10092. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Agile PLM 9.3.5/9.3.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Security. The manipulation leads to improper access controls. This vulnerability is known as CVE-2017-10094. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.