Aggregator

A vulnerability classified as critical has been found in Apple Mac OS X up to 10.11.4. This affects an unknown part of the component AppleGraphicsControl. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2016-1794. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Name: AlpacaHack Round 9 (Crypto) (an AlpacaHack event.)
Date: Jan. 26, 2025, 3 a.m. — 26 Jan. 2025, 09:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://alpacahack.com/
Rating weight: 0
Event organizers: AlpacaHack

恶意样本分析环境搭建以及工具介绍

A vulnerability classified as problematic has been found in Electrosoft Electrocomm 1.0/2.0. Affected is an unknown function of the component Telnet Service. The manipulation leads to denial of service. This vulnerability is traded as CVE-2001-0563. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

A vulnerability was found in BaconMap 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file doadd.php. The manipulation of the argument type leads to sql injection. This vulnerability is handled as CVE-2010-4800. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Milw0rm Clone Script 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/login.php. The manipulation of the argument PWD leads to sql injection. This vulnerability is handled as CVE-2015-4658. The attack may be launched remotely. Furthermore, there is an exploit available.

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063（来源：全国网安标委）分享网络安全知识 强化网络安全意识欢迎关注《中国信息安全》杂志官方抖音号《中国信息安全》杂志倾力推

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063关于发布《网络安全标准实践指南——人脸识别支付场景个人信息安全保护要求》的通知网安秘字〔2025〕19号各有关单位：为指

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063文 | 国家信息中心公共技术部副主任 徐春学党的二十届三中全会明确提出“建设和运营国家数据基础设施，促进数据共享”。近日

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063市场监管总局关于公开征求《网络交易合规数据报送管理暂行办法（征求意见稿）》意见的公告为了规范网络交易合规数据报送行为，提

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-823410631月24日，《中国人民银行业务领域网络安全事件报告管理办法（征求意见稿）》（以下简称“《办法》”）公开征求意见的通知发布

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063全国打击治理电信网络诈骗工作视频会议24日召开，中共中央书记处书记、国务委员王小洪出席并讲话。王小洪强调，要深入学习贯彻

一图读懂国家标准 GB/T 44886.1-2024《网络安全技术 网络安全产品互联互通 第1部分：框架》

意见反馈截止日期为2025年2月21日前。

近日，网安标委网站发布《网络安全标准实践指南——人脸识别支付场景个人信息安全保护要求》。