Aggregator

A vulnerability was found in Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE and ProGauge MAGLINK LX4 CONSOLE. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component POST Request Handler. The manipulation leads to command injection. This vulnerability is known as CVE-2024-43693. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

传奇电影人 James Cameron 加入了 AI 创业公司 Stability AI 的董事会。CEO Prem Akkaraju 表示，James Cameron 生活在未来，等待我们追赶上。Stability AI 的使命是改变下个世纪的视觉媒体，为创作者提供全栈 AI 管线，让他们梦想成真。James Cameron 将有助于它实现这一使命。Stability AI 董事会的其它成员包括了 Greycroft 联合创始人 Dana Settle、Coatue Management COO Colin Bryant，以及担任执行主席的前 Facebook 总裁 Sean Parker。Stability AI 的文本图像模型 Stable Diffusion 是 Hugging Face 上最受欢迎的图像模型，下载量愈 1.5 亿次。

A vulnerability was found in Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE and ProGauge MAGLINK LX4 CONSOLE. It has been classified as very critical. Affected is an unknown function of the component POST Request Handler. The manipulation leads to command injection. This vulnerability is traded as CVE-2024-45066. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in OPW Fuel Managements Systems SiteSentinel and classified as very critical. This issue affects some unknown processing. The manipulation leads to missing authentication. The identification of this vulnerability is CVE-2024-8310. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Elaine Marketing Automation up to 6.18.17 and classified as problematic. This vulnerability affects unknown code of the file /system/interface/wrapper_dialog.php. The manipulation of the argument dialog leads to cross site scripting. This vulnerability was named CVE-2024-42831. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, was found in Google Cloud Storage XML API and Cloud Console Private API Service. This affects an unknown part of the component Audit Log Handler. The manipulation leads to insufficient logging. It is possible to initiate the attack remotely. There is no exploit available. The real existence of this vulnerability is still doubted at the moment. This product is a managed service. This means that users are not able to maintain vulnerability countermeasures themselves.

Arkansas City’s water treatment facility faced a cyber incident on Sunday and has since switched to manual operations

A vulnerability, which was classified as problematic, has been found in CS-Cart MultiVendor 4.16.1. Affected by this issue is some unknown functionality of the component Administration Interface. The manipulation of the argument product_data leads to cross site scripting. This vulnerability is handled as CVE-2023-26688. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as critical was found in CS-Cart MultiVendor 4.16.1. Affected by this vulnerability is an unknown functionality of the component Image Upload Handler. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2023-26686. The attack can be launched remotely. There is no exploit available.

Altered versions of legitimate Android apps associated with Spotify, WhatsApp, and Minecraft have been used to deliver a new version of a known malware loader called Necro. Kaspersky said some of the malicious apps have also been found on the Google Play Store. They have been cumulatively downloaded 11 million times. They include - Wuta Camera - Nice Shot Always (com.benqu.wuta) - 10+ million

A vulnerability classified as very critical has been found in Riello Netman 204 up to 4.05. Affected is an unknown function of the component Forgotten Password Handler. The manipulation leads to weak password recovery. This vulnerability is traded as CVE-2024-8878. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Riello Netman 204 up to 4.05. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The identification of this vulnerability is CVE-2024-8877. The attack may be initiated remotely. Furthermore, there is an exploit available.

SaaS is an integral part of the IT infrastructure for companies of all sizes nowadays. This model lets employees access useful software tools via the cloud, and it powers everything from customer relationship management and financial tracking to team collaboration and data analytics. But with SaaS solutions integrating deeper into every department, the doors to sensitive information are multiplying—SaaS data ... Read More

The post SaaS Data Breaches on the Rise appeared first on Nuspire.

The post SaaS Data Breaches on the Rise appeared first on Security Boulevard.

Learn how to use MITRE's Common Weakness Enumerations (CWE) entries to level up your vulnerability reports.

The post Level Up Your Vulnerability Reports With CWEs appeared first on Dana Epp's Blog.

今日暂未更新资讯~
更多最新文章，请访问SecWiki

С начала июля около 60 VPN-приложений исчезли из App Store.

今天给大家推送美国国会研究处的报告《以色列和黎巴嫩真主党：当前的暴力和潜在的升级》，文本讨论了2023年10月7日以来以色列与巴勒斯坦哈马斯之间的战争以及黎巴嫩真主党的卷入，分析了当前暴力冲突的情况及可能引起的升级风险。

曾经的装机音乐播放器 Winamp 于 2024 年 9 月 24 日公开源代码，源代码采用 Winamp Collaborative License (WCL) Version 1.0 托管在 GitHub 上，禁止创建分支（但在 GitHub 上这是不可能的）。Winamp 由美国程序员 Justin Frankel 和俄罗斯程序员 Dmitry Boldyrev 联合开发。在 1990 年代末和 21 世纪初，几乎每一位用户的 PC 上都安装了 Winamp，它是装机必备软件之一。但在被 AOL 收购之后 Winamp 的发展陷入停滞。2014 年，Winamp 与 Shoutcast 音乐服务一起打包出售给了总部位于比利时布鲁塞尔的在线电台聚合服务 Radionomy。公开源代码将允许开源社区直接帮助改进该产品。