Aggregator

阅读： 9一、威胁通告1.Apache Struts任意文件上传漏洞S2-067(CVE-2024-53677)通告【标签】CVE-2024-53677【发布

A vulnerability has been found in Libav up to 0.8.11 and classified as very critical. This vulnerability affects unknown code. The manipulation leads to memory corruption. This vulnerability was named CVE-2014-3984. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Miniupnpd 1.9. Affected is the function getHTTPResponse of the file miniwget.c. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2014-3985. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Review djblets 0.7.27/0.7.28/0.7.29/0.8.1/0.8.2. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2014-3994. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in FreeRADIUS 1.0.1. Affected is an unknown function. The manipulation leads to denial of service. This vulnerability is traded as CVE-2004-0938. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in FreeRADIUS up to 1.0.0. This affects an unknown part. The manipulation of the argument -1 leads to denial of service. This vulnerability is uniquely identified as CVE-2004-0960. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in FreeRADIUS up to 1.0.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to memory leak. This vulnerability was named CVE-2004-0961. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox. It has been classified as problematic. Affected is an unknown function. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2004-0906. The attack can only be done within the local network. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Easy Software Products CUPS. Affected is an unknown function of the component Samba Error Log Handler. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2004-0923. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla. It has been classified as problematic. This affects an unknown part of the component JavaScript. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2004-0908. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

1999 年 Jorge Arellano Cid 领导的一组开发者创建了 Gzilla/Armadillo 的分支，开始开发今天被称为 Dillo 的浏览器。2024 年 12 月是 D

1999 年 Jorge Arellano Cid 领导的一组开发者创建了 Gzilla/Armadillo 的分支，开始开发今天被称为 Dillo 的浏览器。2024 年 12 月是 Dillo 诞生 25 周年。Jorge 从 1999-2019 年一直领导着 Dillo 项目，但此后他就销声匿迹，状况未知。该项目目前由 Rodrigo Arias Mallo 重启。Dillo 是一种极简的浏览器，被 Damn Small Linux 等极简发行版使用。它最初使用 GTK 作为其 UI 库，后来切换到 FLTK 2。Jorge 在 2019 年发送了最后一封邮件，2022 年 dillo.org 的域名丢失，网站、邮件列表、库和邮件服务器都消失了。Rodrigo 在 2023 年重启了项目，并设法发布了 Dillo 3.1 版本。

This year, a Serbian journalist and an activist had their phones hacked by local authorities using

The Security Service of Ukraine (SBU or SSU) has exposed a novel espionage campaign suspected to be orchestrated by Russia's Federal Security Service (FSB) that involves recruiting Ukrainian minors for criminal activities under the guise of "quest games." Law enforcement officials said that it detained two FSB agent groups following a special operation in Kharkiv. These groups, per the agency,

Cyber Attack / Cyber EspionageThe Security Service of Ukraine (SBU or SSU) has exposed a novel esp

A vulnerability was found in Squid Proxy up to 2.4/2.5/2.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component DNS Response Handler. The manipulation leads to memory corruption. This vulnerability is known as CVE-2002-0163. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Logpoint up to 7.4.x. It has been classified as critical. Affected is an unknown function of the component Search Template Dashboard. The manipulation leads to injection. This vulnerability is traded as CVE-2024-56087. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Logpoint up to 7.4.x and classified as critical. This issue affects some unknown processing of the component Search Template Dashboard. The manipulation leads to injection. The identification of this vulnerability is CVE-2024-56085. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Logpoint up to 7.4.x and classified as critical. This vulnerability affects unknown code of the component Report Template Handler. The manipulation leads to Privilege Escalation. This vulnerability was named CVE-2024-56086. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.