Aggregator

记一次某CMS反序列化任意文件删除的审计过程

应用内存中的后渗透利用-远程工具密码读取

2024-源鲁杯-RE

2024“源鲁杯”高校网络安全技能大赛 WEB题解

0xGame&NewstarCTF WEB题解全

源鲁杯ROUND1 Pwn方向全部题解

利用 procfs 实现只读环境下的任意写到RCE

2024江西工控“振兴杯”初赛WriteUp

The US DoD has finalized the Cybersecurity Maturity Model Certification (CMMC) Program, which defense contractors must pass to bid for government contracts

蚂蚁国际信息安全部，欢迎各位师傅投递简历！

Новый ИИ-инструмент бросает вызов традиционному поиску работы.

A vulnerability was found in Cisco ASA up to 9.5.2 and classified as problematic. This issue affects some unknown processing of the component XML Parser. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2016-1385. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

For the latest discoveries in cyber research for the week of 14th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Nonprofit healthcare organization Axis Health System has been hit by a ransomware attack by the Rhysida gang, leading to the theft of sensitive data, including mental health and substance abuse records. Rhysida […]

The post 14th October – Threat Intelligence Report appeared first on Check Point Research.

Исследователи SEEMOO бросают вызов невидимым похитителям данных.

A vulnerability was found in Cisco TelePresence Codde up to 7.3.5. It has been classified as critical. This affects an unknown part of the component XML API. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2016-1387. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in D3D Security IP Camera D8801. This issue affects some unknown processing of the component HTTP Header Protocol Handler. The manipulation leads to cleartext transmission of sensitive information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The identification of this vulnerability is CVE-2024-47789. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in D3D Security IP Camera D8801. Affected is an unknown function of the component Real-Time Streaming Protocol Handler. The manipulation leads to missing authorization. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is traded as CVE-2024-47790. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Teamplus Technology Team+ 13.5.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to relative path traversal. This vulnerability is known as CVE-2024-9923. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Teamplus Technology Team+ 13.5.x. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation of the argument page leads to sql injection. This vulnerability is handled as CVE-2024-9921. The attack may be launched remotely. There is no exploit available.