Aggregator

A vulnerability was found in NAVER Whale Browser Installer and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to uncontrolled search path. This vulnerability is handled as CVE-2024-50583. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in NEUMANNLTD MUSASI 3 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to use of client-side authentication. This vulnerability is known as CVE-2024-45785. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in NEUMANNLTD N-LINE up to 2.0.6. Affected is an unknown function. The manipulation leads to code injection. This vulnerability is traded as CVE-2024-47158. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Sharp/Toshiba Tec MFP. This issue affects some unknown processing of the component HTTP Authentication Handler. The manipulation leads to authentication bypass using alternate channel. The identification of this vulnerability is CVE-2024-47406. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as critical was found in Sharp/Toshiba Tec MFP. This vulnerability affects unknown code of the component HTTP Request Header Handler. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-43424. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Toshiba Tec/Sharp MFP. This affects an unknown part of the component URI Data Registration. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-48870. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Sharp/Toshiba Tec MFP. It has been rated as problematic. Affected by this issue is some unknown functionality of the component URL Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-47801. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Sharp/Toshiba Tec MFP. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component URL Handler. The manipulation leads to improper neutralization of http headers for scripting syntax. This vulnerability is known as CVE-2024-47549. The attack can be launched remotely. There is no exploit available.

As businesses gear up for another risky fall holiday season, visibility, control and security hygiene remain paramount for success and stability.

The post 3 Tips for Organizations to Shore Up Their Cyber Resilience Strategies This Fall appeared first on Security Boulevard.

На второй день соревнования атаки стали ещё более изощрёнными и разрушительными.

小米 15 系列、小米澎湃 OS 2 官宣 10 月 29 日正式发布；腾讯 2 万多名员工将搬迁系谣言；字节跳动 2024 年营收增幅和利润率双双下降

A vulnerability was found in Sharp/Toshiba Tec MFP. It has been classified as critical. Affected is an unknown function of the component Configuration API. The manipulation leads to exposed dangerous routine. This vulnerability is traded as CVE-2024-47005. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Sharp/Toshiba Tec MFP and classified as critical. This issue affects some unknown processing of the component HTTP PUT Request Handler. The manipulation leads to path traversal. The identification of this vulnerability is CVE-2024-45842. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Sharp/Toshiba Tec MFP and classified as problematic. This vulnerability affects unknown code of the component HTTP Request Handler. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-45829. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Oracle FLEXCUBE Enterprise Limits and Collateral Management 12.0/12.1. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component jQuery. The manipulation leads to improper access controls. This vulnerability is known as CVE-2016-1000031. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

AuthenticID released AuthenticID360, its new holistic identity verification platform. AuthenticID360 delivers robust verification and risk signaling capabilities, including a 2-second response time for identity transactions. A unified solution for comprehensive identity verification and risk scoring AuthenticID360 combines ID verification, biometric authentication, KYC (Know Your Customer) and KYB (Know Your Business) data checks, OFAC (Office of Foreign Assets Control) sanction screening, and advanced fraud watchlists tools – all within a single platform. Built with ease of … More →

The post AuthenticID360 blocks AI-generated IDs during digital onboarding appeared first on Help Net Security.

シャープ製および東芝テック製の複合機（MFP）には、複数の脆弱性が存在します。

银狐黑产组织针对OKX数字货币交流群钓鱼攻击样本分析