Aggregator

渗透测试发行版 Kali Linux 释出了最新的 2024.4，主要新特性包括 Python 3.12，停止提供 i386 内核和镜像，SSH 客户端淘汰 DSA 密钥，Raspberr

渗透测试发行版 Kali Linux 释出了最新的 2024.4，主要新特性包括 Python 3.12，停止提供 i386 内核和镜像，SSH 客户端淘汰 DSA 密钥，Raspberry Pi Imager 支持，GNOME 47，新的 Kali 论坛，等等。开发者称。i386 或 32 位 x86 CPU 架构早已被 x86-64 或 amd64 所取代，2024 年 10 月 Debian 发行版宣布停止构建 i386 内核和镜像，Kali Linux 是基于 Debian 的发行版，因此它也不再支持 i386 架构，但 i386 软件包仍然可能在 x86-64 系统上运行，i386 软件生态系统短时间内是不会消失的。

The first time I encountered the concept of zero-trust, it felt revolutionary. I was working on

By adopting zero-trust principles, we can build systems that are not only decentralized but also secure, resilient and future-proof. 

The post Zero-Trust in Web3: Redefining Security for Decentralized Systems  appeared first on Security Boulevard.

解放耳道，轻若无物：Nothing Ear (open) 成为了我的新选择 耳机是从什么时候如此流行的？让我们先从一个稍有失雅，但的确需要各位重视的话题开始——耳垢。亚洲人群中更常见的是干性耳垢，而

Welcome to the most prestigious event in the world of cyber trickery: the annual Avast Phishing Awar

2024 has been filled with

A vulnerability has been found in Huawei Mate 20 Pro 9.1.0.135(C00E133R3P1)/10.0.0.175(C00E69R3P8) and classified as problematic. This vulnerability affects unknown code of the component Software Package Handler. The manipulation leads to improper authentication. This vulnerability was named CVE-2020-9250. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

News爱尔兰数据保护委员会（DPC）近日对Meta处以2.635亿美元（约合19.23亿人民币）的罚款，原因是2018年Facebook发生的安全漏洞事件，导致全球2900万用户的敏感数据被泄露。这

A vulnerability, which was classified as problematic, was found in Trellix ePolicy Orchestrator up to 5.10 Service Pack 1 Update 2. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-5955. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, has been found in Arista NG Firewall 17.1.1. Affected by this issue is the function uvm_login. The manipulation leads to incorrect authorization. This vulnerability is handled as CVE-2024-12831. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability classified as problematic was found in MaxButtons Button Plugin up to 9.8.0 on WordPress. Affected by this vulnerability is an unknown functionality of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-8968. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Cryout Creations Serious Slider Plugin up to 1.2.6 on WordPress. Affected is an unknown function of the component Shortcode Attribute Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-11108. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Download Manager Plugin up to 3.3.02 on WordPress. It has been rated as problematic. This issue affects some unknown processing of the component Setting Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-10706. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Huawei CV81-WDM FW 01.70.49.29.46. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to denial of service. This vulnerability was named CVE-2022-34159. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in MaxButtons Button Plugin up to 9.8.0 on WordPress. It has been classified as problematic. This affects an unknown part of the component Setting Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-10555. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Huawei CV81-WDM FW 01.70.49.29.46 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to denial of service. This vulnerability is handled as CVE-2022-32204. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Huawei CV81-WDM FW 01.70.49.29.46 and classified as very critical. Affected by this vulnerability is an unknown functionality of the component Printer. The manipulation leads to command injection. This vulnerability is known as CVE-2022-32203. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in HashiCorp Nomad Community Edition and Nomad Enterprise up to 1.9.3. Affected is an unknown function. The manipulation leads to incorrect privilege assignment. This vulnerability is traded as CVE-2024-12678. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.