Aggregator

微软 MFA 中存在AuthQuake 漏洞，可导致无限次暴力攻击

施耐德电气提醒注意 Modicon 控制器中的严重漏洞

With a market share of 66.68%, Google Chrome remains a prime target for cyberattacks. In 2024, this widely used browser faced numerous critical Chrome vulnerabilities that put businesses and individuals at risk and led to significant damage. Attackers exploited these flaws to bypass security measures, steal sensitive information, and deploy malicious payloads.   Security managers are...

The post 2024 Recap: 8 Notable and Dangerous Chrome Vulnerabilities appeared first on TrueFort.

The post 2024 Recap: 8 Notable and Dangerous Chrome Vulnerabilities appeared first on Security Boulevard.

​Meta旗下应用遭遇全球性服务中断，数百万用户受影响

浅析libc2.38版本及以前tcache安全机制演进过程与绕过手法

即将开班！​“系统0day安全”系列课程：掌握漏洞挖掘重要技能

Careto is back: what’s new after 10 years of silence?

评论 | 防范人工智能引发的伦理风险

专家解读 | 强化电力监控安全防护体系，支撑新型电力系统建设

权威解答 | 国家能源局有关负责人就《电力监控系统安全防护规定》答记者问

发布 | 国家发改委发布《电力监控系统安全防护规定》（附全文）

招聘启事 | 中国信息安全测评中心招聘安全测评人员

CNNVD | 关于Apache Struts安全漏洞的通报

CNNVD | 关于微软多个安全漏洞的通报

miyako Claims to be Selling Access to an Unidentified Internet Service Provider

A vulnerability was found in Linux Kernel up to 5.15.9. It has been declared as critical. Affected by this vulnerability is the function nfc_genl_dump_devices of the component nfc. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2021-47612. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Oracle WebLogic Server 14.1.1.0.0. This issue affects some unknown processing of the component Centralized Thirdparty Jars. The manipulation leads to an unknown weakness. The identification of this vulnerability is CVE-2020-13956. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Oracle JD Edwards EnterpriseOne Tools 9.2.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component Deployment SEC. The manipulation leads to an unknown weakness. This vulnerability is handled as CVE-2020-13956. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 5.15.12. This affects the function tw_timer_handler of the component net. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2021-46936. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Oracle Middleware Common Libraries and Tools 12.2.1.4.0. This issue affects some unknown processing of the component Third Party Patch. The manipulation leads to an unknown weakness. The identification of this vulnerability is CVE-2020-13956. The attack may be initiated remotely. There is no exploit available.