Aggregator

某HCM系统文件上传分析

Cybersecurity firm Cloudflare has issued a stark warning about the escalating threat landscape facing independent media organizations worldwide, revealing that journalists and news outlets have become the primary targets of sophisticated distributed denial-of-service (DDoS) attacks. The company’s latest Project Galileo 11th Anniversary report exposes a dramatic surge in cyberattacks against media organizations, with over 97 […]

The post Cloudflare Warns of DDoS Attacks Targeting Journalists and News Organizations appeared first on Cyber Security News.

本文刊登于《中国检察官》杂志2025年5月（司法实务版）

2024年6月，江苏省镇江市检察院对韩某等18人提起公诉，对买家刘某以情节轻微作出不起诉决定。

A vulnerability was found in Linux Kernel up to 5.18.2 and classified as critical. This issue affects some unknown processing of the component EXT4-fs. The manipulation leads to use after free. The identification of this vulnerability is CVE-2022-49349. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.18.2. It has been classified as critical. This affects the function pci_dev_lock. The manipulation leads to deadlock. This vulnerability is uniquely identified as CVE-2022-49434. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 5.10.120/5.15.45/5.17.13/5.18.2. This issue affects the function threshold_create_bank of the file x86/MCE/AMD of the component mce_threshold_create_device. The manipulation of the argument CPU leads to memory leak. The identification of this vulnerability is CVE-2022-49549. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 5.10.109/5.15.32/5.16.18/5.17.1 and classified as critical. Affected by this issue is the function ext4_mb_mark_bb. The manipulation leads to buffer overflow. This vulnerability is handled as CVE-2022-49174. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 5.18.9. Affected by this vulnerability is the function raid5_add_disks. The manipulation leads to privilege escalation. This vulnerability is known as CVE-2022-49673. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 5.17.1 and classified as problematic. This vulnerability affects the function page_mkwrite of the file mm/gup.c. The manipulation leads to denial of service. This vulnerability was named CVE-2022-49171. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Linux Kernel up to 5.4.206/5.10.131/5.15.55/5.18.12. This affects the function evm_verifyxattr. The manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2022-49643. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.10.126/5.15.50/5.18.7. This affects the function xdp_redirect. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2022-49695. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

The cybersecurity landscape has witnessed the emergence of increasingly sophisticated ransomware operations, with DragonForce standing out as a particularly concerning threat actor that has evolved from politically motivated attacks to large-scale financial extortion campaigns. DragonForce ransomware group launched in 2023 as a politically motivated collective, initially targeting entities that aligned with specific ideological beliefs. However, […]

The post DragonForce Ransomware Group – The Rise of a Relentless Cyber Threat in 2025 appeared first on Cyber Security News.

go语言 使用rc4加密+利用Active Directory服务API（AllocADsMem）实现非标准内存分配，结合RtlCopyMemory完成内存写入操作

本文详细记录了一次针对某NFT商城的渗透测试全过程，展示了如何从简单的业务逻辑漏洞入手，逐步深入挖掘，最终实现大规模数据泄露的完整攻击链。

Alleged Data Sale of Agencia Nacional de Hidrocarburos