Aggregator

Вебинар Positive Technologies состоится 12 декабря в 14:00.

A vulnerability classified as critical was found in Dell Avamar up to 19.10SP1. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. This vulnerability is known as CVE-2024-52538. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in Dell Avamar up to 19.10SP1. Affected is an unknown function. The manipulation leads to sql injection. This vulnerability is traded as CVE-2024-47977. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Dell Avamar up to 19.10SP1. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identification of this vulnerability is CVE-2024-47484. The attack may be initiated remotely. There is no exploit available.

Leveraging NIST OSCAL to Provide Compliance Automation: The Complete Guide

A vulnerability was found in LearnPress Plugin up to 4.2.7.3 on WordPress. It has been classified as problematic. Affected is an unknown function of the component REST API. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2024-11868. It is possible to launch the attack remotely. There is no exploit available.

How to become a ghost? Not literally ghost but like someone nobody knows about. Totally under the radar. To me I think pros are way heavier than cons about becoming ghost.

英伟达被立案调查；数据删除取代加密，新型勒索软件攻击或让企业面临更大风险 | 牛览

Researchers found that the broad accessibility of streams of Scottish Parliamentary proceedings make them highly susceptible to deepfake attacks

《API安全技术应用指南（2024版）》报告发布

A vulnerability, which was classified as critical, was found in e107 CMS 0.7.24. Affected is an unknown function of the file install_.php of the component Installation. The manipulation leads to os command injection. This vulnerability is traded as CVE-2011-1513. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Attackers are exploiting a vulnerability (CVE-2024-50623) in file transfer software by Cleo – LexiCo, VLTransfer, and Harmony – to gain access to organizations’ systems, Huntress researchers warned on Monday. “We’ve discovered at least 10 businesses whose Cleo servers were compromised with a notable uptick in exploitation observed on December 8 around 07:00 UTC. After some initial analysis, however, we have found evidence of exploitation as early as December 3,” they shared, and noted that there … More →

The post Attackers actively exploiting flaw(s) in Cleo file transfer software (CVE-2024-50623) appeared first on Help Net Security.

GeoTag – 从地图选点，为照片添加地理位置[macOS]

自动化工具收集网络数据（数据抓取）标准制定需求汇报

Gen Z VCs CEO & Founder Speaks on Revolutionizing Venture Capital for the Next Generation

A vulnerability was found in Linux Kernel up to 4.16. It has been declared as problematic. Affected by this vulnerability is the function mmap. The manipulation as part of Command Line Argument leads to memory corruption. This vulnerability is known as CVE-2018-1120. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

黑白通吃：Glutton木马潜伏主流PHP框架，隐秘侵袭长达1年

A vulnerability classified as critical has been found in Neubivljiv DotA OpenStats up to 1.2.2. Affected is an unknown function of the file index.php. The manipulation of the argument id leads to sql injection. This vulnerability is traded as CVE-2011-5218. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

数据备份的重要性：欧洲云公司Hetzner无警告删除某客户的所有服务器和数据

November 2024 in Software Supply Chain Security