Aggregator

A vulnerability was found in Progress Telerik UI for WPF and classified as very critical. This issue affects some unknown processing. The manipulation leads to deserialization. The identification of this vulnerability is CVE-2024-7576. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Devolutions Server up to 2024.2.10.0 and classified as problematic. This vulnerability affects unknown code of the component PAM Access Request Handler. The manipulation leads to incorrect authorization. This vulnerability was named CVE-2024-6512. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability, which was classified as very critical, was found in Progress Telerik UI for WPF. This affects an unknown part. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2024-8316. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

新华社报道，9 月 25 日 8 时 44 分，中国人民解放军火箭军向太平洋相关公海海域，成功发射 1 发携载训练模拟弹头的洲际弹道导弹，准确落入预定海域。此次导弹发射，是火箭军年度军事训练例行性安排，有效检验武器装备性能和部队训练水平，达到了预期目的。中方提前向有关国家作了通报。这是自 1980 年 5 月以来中国首次向国际水域发射洲际弹道导弹。

На квантовые технологии до 2030 года потребуется 68,9 млрд руб.

Vienna-based privacy non-profit noyb (short for None Of Your Business) has filed a complaint with the Austrian data protection authority (DPA) against Firefox maker Mozilla for enabling a new feature called Privacy-Preserving Attribution (PPA) without explicitly seeking users' consent. "Contrary to its reassuring name, this technology allows Firefox to track user behavior on websites," noyb said

New Android banking trojan Octo2 targets European banks Pierluigi Paganini September 25, 2024

免责声明

Details about and proof-of-concept (PoC) exploit code for CVE-2024-28987, a recently patched SolarWinds Web Help Desk (WHD) vulnerability that could be exploited by unauthenticated attackers to remotely read and modify all help desk ticket details, are now public. “When assessing the exposure of our own clients, we found that organizations typically revealed sensitive process information for IT procedures such as user onboarding, password resets, and accessing shared resources. While this vulnerability does not lead to … More →

The post PoC for critical SolarWinds Web Help Desk vulnerability released (CVE-2024-28987) appeared first on Help Net Security.