Aggregator

A vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical. This vulnerability affects the function SetDlnaCfg of the file /goform/SetDlnaCfg. The manipulation of the argument scanList leads to stack-based buffer overflow. This vulnerability was named CVE-2024-10661. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #435381 / VDB-274137

Submit #434961 / VDB-274137

Submit #434933 / VDB-282677

Submit #434932 / VDB-282676

Закулисная игра спецслужб и её непредвиденные результаты.

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the argument hookId leads to sql injection. This vulnerability is uniquely identified as CVE-2024-10660. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/document/CDGAuthoriseTempletService.java. The manipulation of the argument id leads to sql injection. This vulnerability is handled as CVE-2024-10659. The attack may be launched remotely. Furthermore, there is an exploit available.

APT组织Lazarus 在Rootkit（获取内核权限）攻击中使用了微软的0day漏洞;APT组织Kimsuky利用软件公司产品安装程序进行伪装展开攻击;NoName057(16)组织DDoSia项目持续更新;

Submit #434897 / VDB-251553

无限猴子定理（Infinite monkey theorem）认为，让一只猴子在打字机上随机地按键，当按键时间达到无穷时，几乎必然能够打出任何给定的文字，比如莎士比亚的全套著作。澳大利亚的两位数学家挑战了这一理论，他们发现猴子靠随机打字写出莎士比亚戏剧、十四行诗和诗歌所需的时间比宇宙的寿命还要长。数学家称，虽然无限猴子定理在理论上是正确的，但实际上不可行，有误导性。研究发现，一只黑猩猩在其一生中成功输入“bananas”这个词的几率为 5%。一只黑猩猩写出一个随机句子的概率——例如“我黑猩猩，故我在（I chimp, therefore I am）”——是 1000 万亿分之一。即使到宇宙的尽头，猴子也写不出莎士比亚的作品。

A vulnerability classified as critical was found in Tongda OA up to 11.10. Affected by this vulnerability is an unknown functionality of the file /pda/approve_center/check_seal.php. The manipulation of the argument ID leads to sql injection. This vulnerability is known as CVE-2024-10658. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/approve_center/prcs_info.php. The manipulation of the argument RUN_ID leads to sql injection. This vulnerability is traded as CVE-2024-10657. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. This issue affects some unknown processing of the file /pda/meeting/apply.php. The manipulation of the argument mr_id leads to sql injection. The identification of this vulnerability is CVE-2024-10656. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file /pda/reportshop/new.php. The manipulation of the argument repid leads to sql injection. This vulnerability was named CVE-2024-10655. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #434863 / VDB-282675

Submit #434862 / VDB-282674