Aggregator

Stack Spoof-堆栈欺骗

先知技术社区
3 months ago
本文通过Window x86_32栈回溯机制，详细讲述了两种基本堆栈欺骗的方式，最后讲述了DEFCON中STACKMOONWALK巧妙的堆栈欺骗方式。

Deep Dive into Endpoint Security – Tools and Best Practices for 2025

Cyber Security News
3 months ago

The endpoint security landscape in 2025 represents a sophisticated ecosystem of integrated technologies designed to protect increasingly diverse device environments. Organizations must navigate a complex terrain of EDR, XDR, and EPP solutions while implementing Zero Trust architectures and managing unprecedented endpoint diversity. This comprehensive analysis examines cutting-edge tools, provides technical implementation guidance, and establishes best […]

The post Deep Dive into Endpoint Security – Tools and Best Practices for 2025 appeared first on Cyber Security News.

CISO Advisory

CVE-2023-45696 | HCL Sametime up to 12.0.1 FP1 Legacy Web Chat Client information disclosure (KB0109082 / EUVD-2023-49985)

Vuldb Updates
3 months ago
A vulnerability was found in HCL Sametime up to 12.0.1 FP1 and classified as problematic. This issue affects some unknown processing of the component Legacy Web Chat Client. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2023-45696. It is possible to launch the attack on the physical device. There is no exploit available.
vuldb.com

CVE-2023-37529 | HCL BigFix Platform up to 9.5.23/10.0.10 Web Reports cross site scripting (KB0110209 / EUVD-2023-41416)

Vuldb Updates
3 months ago
A vulnerability, which was classified as problematic, has been found in HCL BigFix Platform up to 9.5.23/10.0.10. This issue affects some unknown processing of the component Web Reports. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2023-37529. The attack may be initiated remotely. There is no exploit available.
vuldb.com

CVE-2022-38877 | Garage Management System 1.0 editProductImage.php?id=1 unrestricted upload (EUVD-2022-41434)

Vuldb Updates
3 months ago
A vulnerability, which was classified as critical, has been found in Garage Management System 1.0. This issue affects some unknown processing of the file ip/garage/php_action/editProductImage.php?id=1. The manipulation leads to unrestricted upload. The identification of this vulnerability is CVE-2022-38877. The attack may be initiated remotely. There is no exploit available.
vuldb.com

CVE-2022-38832 | School Activity Updates with SMS Notification 1.0 index.php?view=edit ID sql injection

Vuldb Updates
3 months ago
A vulnerability, which was classified as critical, was found in School Activity Updates with SMS Notification 1.0. Affected is an unknown function of the file /activity/admin/modules/department/index.php?view=edit. The manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2022-38832. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

CVE-2022-38833 | School Activity Updates with SMS Notification 1.0 index.php?view=view ID sql injection

Vuldb Updates
3 months ago
A vulnerability has been found in School Activity Updates with SMS Notification 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /activity/admin/modules/modstudent/index.php?view=view. The manipulation of the argument ID leads to sql injection. This vulnerability is known as CVE-2022-38833. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2022-38878 | School Activity Updates with SMS Notification 1.0 index.php?view=edit ID sql injection

Vuldb Updates
3 months ago
A vulnerability was found in School Activity Updates with SMS Notification 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /activity/admin/modules/event/index.php?view=edit. The manipulation of the argument ID leads to sql injection. This vulnerability is handled as CVE-2022-38878. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2022-2912 | Craw Data Plugin up to 1.0.0 on WordPress url server-side request forgery

Vuldb Updates
3 months ago
A vulnerability was found in Craw Data Plugin up to 1.0.0 on WordPress and classified as critical. This issue affects some unknown processing. The manipulation of the argument url leads to server-side request forgery. The identification of this vulnerability is CVE-2022-2912. Access to the local network is required for this attack to succeed. There is no exploit available.
vuldb.com

CVE-2022-2913 | Login No Captcha reCAPTCHA Plugin up to 1.6 on WordPress Login Screen authorization

Vuldb Updates
3 months ago
A vulnerability was found in Login No Captcha reCAPTCHA Plugin up to 1.6 on WordPress. It has been classified as critical. Affected is an unknown function of the component Login Screen. The manipulation leads to authorization bypass. This vulnerability is traded as CVE-2022-2913. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-39007 | Huawei EMUI/HarmonyOS Location Module access control

Vuldb Updates
3 months ago
A vulnerability was found in Huawei EMUI and HarmonyOS. It has been declared as critical. This vulnerability affects unknown code of the component Location Module. The manipulation leads to improper access controls. This vulnerability was named CVE-2022-39007. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad