Aggregator

A vulnerability, which was classified as problematic, has been found in Python Software CPython up to 3.13.0b4. Affected by this issue is the function socket.socketpair of the component Socket Module. The manipulation leads to race condition. This vulnerability is handled as CVE-2024-3219. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in X.org X11 Server up to 21.1.8/23.2.1. Affected by this issue is some unknown functionality of the component Screen Cleanup. The manipulation leads to memory leak. This vulnerability is handled as CVE-2023-5574. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in oFono. It has been rated as critical. This issue affects some unknown processing of the component SMS Decoder. The manipulation leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2023-4232. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in radare2 up to 5.9.8 on 64-bit and classified as critical. This issue affects some unknown processing of the component Pebble Application File Handler. The manipulation leads to command injection. The identification of this vulnerability is CVE-2024-11858. The attack can only be done within the local network. There is no exploit available.

Multimodal Agentic AI Delivers Speed, Tools and Research Prototypes
Google's latest AI model can natively process and output text, images and audio in the search giant's push toward more autonomous reasoning, planning and action. The company said Gemini 2.0 is designed for applications ranging from development and gaming to research and everyday assistance.

报名方式：https://www.hackprove.com/events/conference

本文探讨了众多网络安全的核心技术，这些技术在网络安全领域扮演着至关重要的角色，它们用于保障系统安全、识别并应对安全威胁。

Russia-linked APT group Secret Blizzard is using Amadey Malware-as-a-Service to infect systems in Ukraine with the Kazuar backdoor. The Russia-linked APT group Secret Blizzard (aka Turla, Snake, Uroburos, Waterbug, Venomous Bear and KRYPTON) was spotted using the Amadey malware to deploy the KazuarV2 backdoor on devices in Ukraine. The experts observed threat actors using the Amadey bot malware between March and April 2024. Microsoft highlights […]

Проекты тонут в фальшивых отчетах об ошибках.

最专业的 [ .NET 代码审计 ] 体系化学习社区

.NET 技术系列 | 通过CreatePipe函数创建管道

.NET 一款用于内网渗透中痕迹清理的的工具

Smashing Security podcast #397: Snowflake hackers, and under the influence

2024年12月12日，深瞳漏洞实验室监测到一则Apache-Struts2组件存在任意文件上传漏洞的信息，漏洞编号：CVE-2024-53677，漏洞威胁等级：严重。

面壁智能获新一轮数亿元融资，继续聚焦端侧 AI

苹果发 iOS18.2，Siri 合体 ChatGPT；传剪映收入近百亿；马斯克成首个 4000 亿美元身家富豪 | 极客早知道

派早报：Apple 公布年度应用、iOS 和 iPadOS 18.2 已发布等