Aggregator

Разработчики Angie представили новую версию своего веб-сервера.

感兴趣的还可以继续深挖。

A vulnerability, which was classified as critical, has been found in AliyunContainerService Pouch 1.3.1. This issue affects some unknown processing. The manipulation leads to symlink following. The identification of this vulnerability is CVE-2024-41228. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability classified as critical was found in lobehub lobe-chat up to 1.19.12. This vulnerability affects unknown code of the file src/app/api/proxy/route.ts. The manipulation leads to server-side request forgery. This vulnerability was named CVE-2024-47066. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as very critical has been found in DataEase up to 2.10.0. This affects an unknown part of the component h2 Data Source Connection String Handler. The manipulation leads to injection. This vulnerability is uniquely identified as CVE-2024-46997. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in DataEase up to 2.10.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. This vulnerability is handled as CVE-2024-46985. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

After launching an investigation in February into vehicles made by foreign adversaries, the Biden administration is finally making its move in the name of national security.

Управление виртуальными машинами перестало быть безопасным для многих администраторов.

在对中国电动汽车征收 100% 关税之后，美国商务部准备事实上禁止中国制造的电动汽车，它将以国家安全的理由禁止中国联网汽车软件和硬件在美国公路上行驶。商务部长 Gina Raimondo 表示，外国竞争对手开发的联网汽车可用于监视，可远程控制，威胁到美国人在公路上的隐私和安全。在极端情况下，他们可能关闭或控制在美国的联网汽车，制造车祸，阻塞交通。中国在 2021 年也实施了类似的禁令，禁止特斯拉汽车进入军事基地和其它国有设施。

The flaws are dangerous as the Houzez theme and Login Register plugin could allow privilege escalation by unauthenticated users