Aggregator

A Threat Actor is Allegedly Selling Unauthorized Access to an IT Company in Canada

A vulnerability classified as problematic was found in NetWin SurgeMail 78c2. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-11990. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in Quick CMS 6.7. This affects an unknown part. The manipulation of the argument aDirFiles%5B0%5D leads to path traversal. This vulnerability is uniquely identified as CVE-2024-11992. It is possible to initiate the attack remotely. There is no exploit available.

俄罗斯 Tor 用户报告该国的审查力度在加大，其中包括尝试屏蔽 Tor 网桥和 pluggable transports。俄罗斯通信监管机构 Roscomnadzor 还将打击目标瞄准托管服务商，而很多帮助躲避审查的工具就依赖于这些服务商的服务器，其中包括了 Tor 网桥。随着审查的加大，Tor 项目需要更多 WebTunnel 网桥。WebTunnel 是一种新型的网桥，通过模拟 HTTPS 流量增加屏蔽 Tor 连接的难度。审查者不可能完全屏蔽 HTTPS 连接，因为这会导致绝大部分服务无法访问。Tor 项目希望到年底增加 200 个新 WebTunnel 网桥，为俄罗斯用户提供安全访问。