Aggregator

A vulnerability has been found in wpexpertsio myCred Plugin up to 2.7.3 on WordPress and classified as problematic. This vulnerability affects the function mycred_update_database. The manipulation leads to missing authorization. This vulnerability was named CVE-2024-8658. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in javmah Spreadsheet Integration Plugin up to 3.7.9 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to missing authorization. This vulnerability is handled as CVE-2024-6590. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Themesflat Addons for Elementor Plugin up to 2.2.1 on WordPress. This affects the function render. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2024-8516. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Prisna GWT Plugin up to 1.4.11 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation of the argument prisna_import leads to deserialization. This vulnerability is known as CVE-2024-8514. The attack can be launched remotely. There is no exploit available.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting Ivanti Virtual Traffic Manager (vTM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability in question is CVE-2024-7593 (CVSS score: 9.8), which could be exploited by a remote unauthenticated attacker to bypass the

A vulnerability was found in CrackLib. It has been declared as critical. This vulnerability affects the function FascistGecosUser in the library lib/fascist.c. The manipulation of the argument GECOS leads to memory corruption. This vulnerability was named CVE-2016-6318. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

Buenas a todos y bienvenidos a este artículo, soy b1n4ri0 (otra vez). Hoy vamos a pelearnos un poco con un...

你可能错过的新鲜事iQOO Z9 Turbo+ 发布9 月 24 日，iQOO Z9系列新机型 iQOO Z9 Turbo+ 正式发布。iQOO Z9 Turbo+ 配备天玑 9300+ 处理器和

近日，城市全域数字化转型现场推进会在重庆市召开。会上，国家数据局首次发布全国首批城市全域数字化转型典型案例，其 […]

9月12日，CSA大中华区在国家网络安全宣传周成都系列活动上正式发布《AI安全产业图谱（2024）》。国投智能 […]

9月19日-21日，华为全联接大会2024在上海举行。本次大会以“共赢行业智能化”为主题，邀请全球思想领袖、商 […]

Salesforce dropped a bombshell at Dreamforce when they unveiled Agentforce, an AI-powered platform t

A vulnerability, which was classified as critical, has been found in GNU tar up to 1.29. Affected by this issue is some unknown functionality of the component Extraction. The manipulation leads to path traversal (Path). This vulnerability is handled as CVE-2016-6321. The attack may be launched remotely. Furthermore, there is an exploit available. The real existence of this vulnerability is still doubted at the moment. It is recommended to upgrade the affected component.

A vulnerability was found in Jogoeusei Questoes OAB 1.2 and classified as critical. Affected by this issue is some unknown functionality of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is handled as CVE-2014-6999. The attack can only be initiated within the local network. There is no exploit available.

新闻速览 •美国商务部拟借口“国家安全”禁用我国网联汽车软硬件系统 •民政部提醒：切勿轻信来源不明的软件信息 […]

9月21日，2024年度关键信息基础设施安全保护论坛在北京成功举办。本次论坛由中关村华安关键信息基础设施安全保 […]

Alisonicが提供するSibyllaには、SQLインジェクションの脆弱性が存在します。

Franklin Electric Fueling Systemsが提供するTS-550 EVOには、絶対パストラバーサルの脆弱性が存在します。

error code: 1106

Moxaが提供するMXview OneおよびMXview One Central Managerには、複数の脆弱性が存在します。