Aggregator

A vulnerability classified as problematic has been found in IdeaPush Plugin up to 8.71 on WordPress. Affected is an unknown function of the component Board Term Handler. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2024-11844. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Charity Addon for Elementor Plugin up to 1.3.2 on WordPress. Affected is an unknown function of the component Post Handler. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2024-12062. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in BP Profile Shortcodes Extra Plugin up to 2.6.0 on WordPress. It has been declared as critical. This vulnerability affects unknown code of the component Shortcode Handler. The manipulation of the argument tab leads to sql injection. This vulnerability was named CVE-2024-11732. The attack can be initiated remotely. There is no exploit available.

Исследователи создали чип для глубокого обучения на основе света.

Новый доклад показывает, почему китайские технологии заставляют США переживать за нацбезопасность.

Access Control in Paxton Net2 software

A vulnerability was found in Samsung Smart Touch Call 1.0.0.5. It has been classified as problematic. This affects an unknown part. The manipulation leads to use of implicit intent for sensitive communication. This vulnerability is uniquely identified as CVE-2024-49417. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Samsung Devices. It has been declared as critical. This vulnerability affects unknown code in the library libsaped.so. The manipulation leads to heap-based buffer overflow. This vulnerability was named CVE-2024-49415. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Samsung Devices. It has been rated as problematic. This issue affects some unknown processing of the component Bluetooth Handler. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2024-49412. An attack has to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Samsung Quick Share Agent and classified as critical. This vulnerability affects unknown code. The manipulation leads to path traversal. This vulnerability was named CVE-2024-49421. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Samsung Devices. It has been classified as critical. Affected is an unknown function in the library libswmfextractor.so. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2024-49410. Attacking locally is a requirement. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Samsung Devices. It has been rated as problematic. Affected by this issue is some unknown functionality of the component SmartSwitch. The manipulation leads to improper verification of cryptographic signature. This vulnerability is handled as CVE-2024-49413. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic has been found in Samsung SmartThings up to 1.8.20. This affects an unknown part. The manipulation leads to use of implicit intent for sensitive communication. This vulnerability is uniquely identified as CVE-2024-49416. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Samsung Devices. This vulnerability affects unknown code of the component Dex Mode. The manipulation leads to authentication bypass using alternate channel. This vulnerability was named CVE-2024-49414. It is possible to launch the attack on the physical device. There is no exploit available. It is recommended to apply a patch to fix this issue.

美国拜登政府周一宣布了新的出口管控措施，限制向中国 AI 公司出口 HBM 内存芯片，限制出口另外 24 种芯片制造工具和 3 种软件工具，以及限制出口新加坡和马来西亚等国制造的芯片制造设备。有大约二十家中国半导体公司被美国列入实体名单，其中包括很多华为的供应商。受最新出口管控影响的美国公司包括了 Lam Research、KLA 和 Applied Materials，非美国公司包括 ASM International 和三星。三星约三成的 HBM 内存芯片销售来自中国。中国公司已经对最新一轮出口管控做了准备，提前囤了美国公司如 Applied Materials 的设备。

When departments independently adopt SaaS applications, the security team often loses visibility and control, making these environments highly vulnerable to attacks.

The post The Decentralized SaaS Adoption Trend: Why This Poses a Risk to Organizations and Identities appeared first on Security Boulevard.

Уязвимость LogoFAIL стала вектором атаки на компьютеры Lenovo.

Sweet Security introduces unified Cloud Native Detection and Response platform, designed to transform the way organizations protect their cloud environments in real time. Sweet’s platform integrates the capabilities of Application Detection and Response (ADR), Cloud Detection and Response (CDR), and Cloud Workload Protection Platform (CWPP) into one comprehensive solution. This approach delivers detection and response capabilities, unifying insights from every layer of the cloud stack. “The Sweet team has worked tirelessly to build a platform … More →

The post Sweet Security helps organizations protect their cloud environments appeared first on Help Net Security.

美军新一代网络威胁检测平台CANDOR即将投入实战；乌干达央行遭遇严重黑客攻击，628亿先令网络蒸发！| 牛览

UnitedHealth勒索软件攻击事件应吸取的六个备份教训