Aggregator

A vulnerability, which was classified as critical, has been found in FreeCMS 0.2. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument page leads to sql injection. This vulnerability is handled as CVE-2008-2796. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Citrix Deterministic Network Enhancer up to 3.21.7.17464. Affected is an unknown function. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2008-5121. Local access is required to approach this attack. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

“I don’t have enough fingers to count what was th

Key TakeawaysAnalysis of an open directory found a Chinese speaking threat actor’s tool

Червоточины помогут спасти миллионы жизней в прошлом.

不仅是可以通过网络攻击来影响物理空间，网络空间也会受到物理空间风险的波及。

Почему Automattic ужесточает цензуру с упоминанием бренда в интернете?

Самое сложное впереди, но уроки прошлого уже стали фундаментом.

A vulnerability, which was classified as critical, has been found in Apple watchOS up to 3.1. Affected by this issue is some unknown functionality of the component FontParser. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2017-2407. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

你可能错过的新鲜事Arc 开发商宣布转向新浏览器10 月 25 日，Arc 浏览器开发商 The Browser Company 发布一则视频，宣布将推出一款比 Arc 更加「简洁易用」的浏览器，

A vulnerability, which was classified as problematic, has been found in Jon Zeeff Lmail 2.7. This issue affects some unknown processing of the component Temp File Handler. The manipulation leads to symlink following. The identification of this vulnerability is CVE-2001-1085. Local access is required to approach this attack. Furthermore, there is an exploit available.

议题将分享斗象科技在线安全运营、实战安全服务、众包模式等一体化安全服务创新模式实践。

Участники соревнований установили рекорд на Pwn2Own Ireland.

利用MSIX安装包传播恶意软件攻击样本的详细分析

Инженеры из Веллингтона создают искусственное Солнце на Земле.

A vulnerability was found in Contact Form 7 + Telegram Plugin up to 0.8.5 on WordPress. It has been classified as problematic. Affected is an unknown function of the component Subscription Handler. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2024-9629. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Vmware Spring Security up to 6.3.3 and classified as critical. This issue affects some unknown processing of the component WebFlux. The manipulation leads to improper authorization. The identification of this vulnerability is CVE-2024-38821. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

参与 SpaceX 载人航天任务的一名宇航员出现「医疗问题」并住院；抖音出手整治：严打 AI 骗取老年人行为

Защита ядра оказалась бессильной перед новым PoC-эксплойтом.