Aggregator

A vulnerability classified as problematic has been found in za-internet C-MOR Video Surveillance 5.2401. Affected is an unknown function of the component Web Interface. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-45176. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Trusted Firmware-M up to 2.0.0. It has been rated as problematic. This issue affects some unknown processing of the component Login. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2023-51712. Access to the local network is required for this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in MindsDB up to 23.12.4.1. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to server-side request forgery. This vulnerability was named CVE-2024-24759. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in RapidIdentity LTS and Cloud. It has been classified as problematic. This affects an unknown part. The manipulation of the argument username leads to denial of service. This vulnerability is uniquely identified as CVE-2024-45589. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in za-internet C-MOR Video Surveillance 5.2401 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cleartext storage of sensitive information. This vulnerability is handled as CVE-2024-45175. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in IBM Aspera Faspex up to 5.0.9 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to exposure of information through directory listing. This vulnerability is known as CVE-2024-45096. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in IBM Aspera Faspex up to 5.0.9. Affected is an unknown function. The manipulation leads to trusting http permission methods on the server side. This vulnerability is traded as CVE-2024-45098. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in IBM Aspera Faspex up to 5.0.9. This issue affects some unknown processing. The manipulation leads to trusting http permission methods on the server side. The identification of this vulnerability is CVE-2024-45097. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in za-internet C-MOR Video Surveillance 5.2401. This vulnerability affects unknown code of the file download-bkf.pml. The manipulation leads to path traversal. This vulnerability was named CVE-2024-45178. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as critical has been found in za-internet C-MOR Video Surveillance 5.2401. This affects an unknown part of the component Web Interface. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2024-45173. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in za-internet C-MOR Video Surveillance 5.2401. It has been rated as critical. Affected by this issue is some unknown functionality of the file /srv/www/backups. The manipulation leads to unrestricted upload. This vulnerability is handled as CVE-2024-45171. The attack may be launched remotely. There is no exploit available.

via the comic & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Lava Lakes’ appeared first on Security Boulevard.

Yet, another critical severity vulnerability has been discovered in LiteSpeed Cache, a caching plugin for speeding up user browsing in over 6 million WordPress sites. [...]

昨天，“数说安全”微信公众号发布了一篇文章《各网安上市公司的现金还能撑多久》，本文用今年中报的数据进行了更新，和扩展。

North Carolina musician Michael Smith was indicted for collecting over $10 million in royalty payments from Spotify, Amazon Music, Apple Music, and YouTube Music using AI-generated songs streamed by thousands of bots in a massive streaming fraud scheme. [...]

大模型能比人类更快的概述一篇长文，因此很多用户和企业尝试用它去概述冗长的文档以方便阅读。澳大利亚证券和投资委员会(ASIC)对此展开了研究，他们测试了开源大模型 Llama2-70B，发现它提供的概述相比人类提供的差很多。Llama2-70B 不是目前最先进的大模型，这一结果不太能够推广到最先进大模型的概述能力。尽管如此，研究表明，大型组织在将大模型的输出集成到现有工作流前需要三思。ASIC 发现，大模型生成的概述太笼统，还常常包含不正确的信息，语法正确，但幻觉无法避免。对比测试发现，AI 的平均得分为 7/15，而人类是 12.2/15。

Проект по оцифровке книг был запущен в разгар пандемии для поддержки читателей.

Post-Quantum Cryptography (PQC) is a new generation of encryption algorithms for protecting data against powerful quantum computers. Quantum computers use quantum mechanics to solve complex problems much faster than traditional computers. With rapid advancements in quantum computing, current encryption algorithms like RSA are at risk of being broken, which would take regular computers hundreds or […]

The post Understanding Quantum Threats and How to Secure Data with Post-Quantum Cryptography appeared first on Security Boulevard.