Aggregator

A vulnerability was found in Apple macOS up to 10.13.1. It has been rated as very critical. Affected by this issue is some unknown functionality of the component tcpdump. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2017-13023. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Fiksu Fiksu library. Affected is an unknown function of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is traded as CVE-2014-5971. The attack can only be initiated within the local network. There is no exploit available.

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. BlackSuit Ransomware Dissecting the Cicada       Year-Long Campaign of Malicious npm Packages Targeting Roblox Users   Rocinante: The trojan horse that wanted to fly    Threat actors using MacroPack to deploy Brute Ratel, Havoc and PhantomCore payloads Earth […]

A vulnerability was found in tcpdump up to 4.9.1. It has been classified as critical. Affected is the function mobility_opt_print of the file print-mobility.c of the component IPv6 Mobility Parser. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2017-13023. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in BabyBus 3.91. Affected is an unknown function of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is traded as CVE-2014-5970. The attack can only be done within the local network. There is no exploit available.

A vulnerability was found in healthylifestyle 1.2.2. It has been rated as critical. This issue affects some unknown processing of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. The identification of this vulnerability is CVE-2014-5969. The attack needs to be approached within the local network. There is no exploit available.

A vulnerability was found in iGolf iGolf - Golf GPS 20. It has been declared as critical. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability was named CVE-2014-5968. Access to the local network is required for this attack to succeed. There is no exploit available.

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

《西部世界》即将到来？作者 | 张勇毅编辑 | 郑玄你是否设想过「完全由 AI 掌控运行的世界」会是什么面貌？或许你还以为这种设想距离我们仍然有一段距离，但实际上「世界上首个 AI」文明已经诞生，并且

过去四年担任 Linux Man pages 维护者的 Alejandro Colomar 宣布暂停工作。Man pages 是 manual page 的缩写。Alejandro 称自己是在空闲时间做维护工作，没有任何企业赞助 Linux 手册的维护。现在他无法在经济上继续支持该工作，将无限期暂停维护。如果有企业想要赞助，请联络他。

A vulnerability classified as critical was found in Post Revolution 6.6. Affected by this vulnerability is an unknown functionality of the file common.php of the component Themes. The manipulation of the argument dir leads to file inclusion. This vulnerability is known as CVE-2007-2201. The attack can be launched remotely. Furthermore, there is an exploit available.

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. U.S. CISA adds Draytek VigorConnect and Kingsoft WPS Office bugs to its Known Exploited Vulnerabilities catalog A flaw […]

A vulnerability was found in decoracionesnailart Designs Nail Arts 3.6.1. It has been classified as critical. This affects an unknown part of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is uniquely identified as CVE-2014-5967. Access to the local network is required for this attack. There is no exploit available.

在保护网民的名义下，马来西亚通信和多媒体委员会(MCMC) 周五命令 ISP 重定向第三方 DNS 服务器的 DNS 流量到本地 DNS 服务器。MCMC 表示此举旨在确保马来西亚人无法访问恶意网站。MCMC 至今已屏蔽了逾 2 万个网站，其中网络赌博(39%)、色情/淫秽内容 (31%)、侵犯版权 (14%)、销售未注册产品、煽动和诽谤等有害网站(12%)、卖淫 (2%) 和非法投资/诈骗 (2%)。MCMC 表示这一举措是为了确保易受伤害的群体免受有害网络内容的伤害。MCMC 的命令立即引发了争议。马来西亚通信部长 Fahmi Fadzil 下令暂停 DNS 重路由，要求 MCMC 收集意见和建议。部长强调为了儿童的安全政府不会在网络犯罪问题上退让。

A vulnerability was found in Opera Web Browser 9.2. It has been classified as critical. This affects an unknown part. The manipulation leads to improper resource management. This vulnerability is uniquely identified as CVE-2007-2274. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Pagode. It has been rated as critical. Affected by this issue is some unknown functionality of the file navigator/navigator_ok.php. The manipulation of the argument asolute leads to improper privilege management. This vulnerability is handled as CVE-2007-2200. An attack has to be approached locally. Furthermore, there is an exploit available.

A vulnerability was found in HP HP-UX 10.01/10.10/10.20/11.00. It has been declared as critical. This vulnerability affects unknown code of the component swverify. The manipulation leads to memory corruption. This vulnerability was named CVE-2001-0979. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Golauncher Dreamland Super Theme GO Gold 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is handled as CVE-2014-5966. The attack needs to be initiated within the local network. There is no exploit available.

HomemacOS文颜 – 使用 Markdown 书写、排版，一键复制文章到微信公众号、知乎、今日头条、掘金[macOS]

A vulnerability classified as critical has been found in Enigma Haber. Affected is an unknown function of the file admin/detay_yorum.asp. The manipulation of the argument \hid\ leads to sql injection. This vulnerability is traded as CVE-2006-2731. It is possible to launch the attack remotely. Furthermore, there is an exploit available.