Aggregator

A vulnerability, which was classified as critical, was found in PHPmotion 1.0/2.0/2.1. This affects an unknown part of the file password.php. The manipulation of the argument email_address leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2008-6729. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in Apple CUPS 1.3.8. Affected is an unknown function. The manipulation leads to link following. This vulnerability is traded as CVE-2008-5377. An attack has to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Nodstrum MySQL Calendar 1.1. Affected by this issue is some unknown functionality of the file index.php of the component MySQL. The manipulation of the argument username leads to sql injection. This vulnerability is handled as CVE-2008-5737. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Mozilla Firefox 3.0.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to improper input validation. This vulnerability was named CVE-2008-5715. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as very critical, has been found in Psi-im PSI up to 0.12. This issue affects some unknown processing. The manipulation leads to numeric error. The identification of this vulnerability is CVE-2008-6393. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cms.maury91 SolarCMS 0.53.8/1.0. It has been classified as critical. Affected is an unknown function of the file Forum.php. The manipulation of the argument cat leads to sql injection. This vulnerability is traded as CVE-2008-6345. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in RoundCube Webmail 0.2. It has been classified as very critical. This affects the function preg_replace of the file html2text.php. The manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2008-5619. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063连续使用移动智能终端时长超过30分钟应发出休息提醒，退出未成年人模式需家长验证同意……为进一步强化未成年人网络保护，营造

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063（来源：中国网信网）分享网络安全知识 强化网络安全意识欢迎关注《中国信息安全》杂志官方抖音号《中国信息安全》杂志倾力推荐

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063漏洞情况近日，国家信息安全漏洞库（CNNVD）收到关于Apache OFBiz安全漏洞(CNNVD-202411-227

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063漏洞情况近日，国家信息安全漏洞库（CNNVD）收到关于Palo Alto Networks PAN-OS 安全漏洞（CN

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063浙江乌镇，古朴水乡的汩汩溪流，连着信息时代的浩荡潮流。2014年11月，首届世界互联网大会举行，习近平主席向大会致贺词。

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-82341063伴随数字技术渗透到人类生产生活的方方面面，全球数字经济快速发展，数字社会逐步成为人们分享文明进步的新空间。数据作为数字经

扫码订阅《中国信息安全》邮发代号 2-786征订热线：010-8234106311月20日，国家主席习近平向2024年世界互联网大会乌镇峰会开幕视频致贺。新华社记者 谢环驰 摄11月20日，国家主席

Cybersecurity investigators found the leaked data to be information from a third party, not Ford itself, that is already accessible to the public and not sensitive in nature.

A Threat Actor is Allegedly Selling Access of Aatcart

浏览器漏洞利用一直是备受关注的热点话题。浏览器作为用户与互联网进行交互的主要工具，也是黑客攻击的重要目标之一。当浏览器存在漏洞时，黑客可以利用这些漏洞进行恶意攻击，例如窃取用户的个人信息、安装恶意软件

苹果公司针对基于英特尔处理器的Mac系统发布了紧急安全更新，修复了两个被积极利用的零日漏洞。这些漏洞涉及macOS的JavaScriptCore和WebKit组件，可能允许攻击者通过恶意网页内容执行任

在本人第一篇博客UPX代码buildloader函数分析（https://bbs.kanxue.com/thread-283702.htm），对加载器初始化过程阐明了不同条件下的加载逻辑，本文根据其加

A vulnerability was found in Joomlaapps Com Volunteer 2.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument job_id leads to sql injection. The identification of this vulnerability is CVE-2008-6337. The attack may be initiated remotely. Furthermore, there is an exploit available.