Aggregator

A vulnerability classified as problematic was found in ImageMagick 7.0.7-22 Q16. This vulnerability affects the function ReadPSDLayersInternal of the file coders/json.c. The manipulation leads to improper resource management. This vulnerability was named CVE-2018-5358. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in ImageMagick 7.0.7-20 Q16. It has been rated as problematic. This issue affects the function ReadDCMImage of the file coders/dcm.c. The manipulation as part of Image File leads to improper resource management. The identification of this vulnerability is CVE-2018-11656. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

关注高级攻防对抗技术热点，研究对手技术进行高级威胁模拟，研判攻击安全发展方向。

点击文末“阅读原文”，快来报名参加！

报名参赛还可免费抽黑神话悟空豪华版/普通版！

Множество криптовалют испарилось из горячих кошельков компании.

A vulnerability, which was classified as critical, was found in Adobe After Effects up to 23.6.6/24.5. This affects an unknown part. The manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2024-41867. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Adobe After Effects up to 23.6.6/24.5. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2024-41859. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Adobe After Effects up to 23.6.6/24.5. Affected by this vulnerability is an unknown functionality. The manipulation leads to heap-based buffer overflow. This vulnerability is known as CVE-2024-39380. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Huawei HG532. Affected is an unknown function of the component Service Port 37215. The manipulation as part of Packet leads to improper input validation. This vulnerability is traded as CVE-2017-17215. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

A critical vulnerability in the Apache OFBiz framework has been actively exploited by hackers. The flaw designated CVE-2024-45195, allows for unauthenticated remote code execution (RCE), posing a threat to organizations relying on OFBiz for their operations. CVE-2024-45195 – Vulnerability Details The CVE-2024-45195 vulnerability arises from missing view authorization checks in the web application. This enables […]

The post Hackers Exploiting Apache OFBiz RCE Vulnerability in the Wild appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Две уязвимости позволяют извлекать зашифрованные пароли без аутентификации.

精选了本周知识大陆公开发布的10条优质资源，让我们一起看看吧。

2024-09-19 X-WORM RAT (Phishing) Samples2024-09-12 0day in {REA_TEAM}: The X-Worm malware is b

Ты изучишь все аспекты атаки, научишься разрывать «убийственную цепочку» и останавливать хакеров.

你可能错过的新鲜事OpenAI 发布全新 o1 模型OpenAI 发布了全新 AI 模型 o1 及其简化版本 o1-mini，这两个模型专注于解决科学、编码、数学和类似领域的复杂问题。o1 模型通

A vulnerability classified as critical was found in wps Kingsoft Clip (Office Tool) 1.5.1. This vulnerability affects unknown code of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability was named CVE-2014-6692. The attack needs to be initiated within the local network. There is no exploit available.

MIT превратил электроны в атомы, чтобы изучить важнейшее для физики явление.

A vulnerability classified as critical has been found in Ucweb UC Browser HD 3.3.1.469. This affects an unknown part of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is uniquely identified as CVE-2014-6691. The attack needs to be done within the local network. There is no exploit available.