Aggregator

The following advisory data is extracted from:https://access.redhat.com/security/data/csaf/v2/advi

© 2024 Packet Storm. All rights reserved.

The following advisory data is extracted from:https://access.redhat.com/security/data/csaf/v2/advi

Google Chrome 浏览器今年至今修复了 10 个 0day。其中第 10 个是安全研究员 TheDog 报告的 CVE-2024-7965，是编译器后端在选择要生成的 JIT 编译指令时的一个 bug 导致的，位于 V8 JS 引擎中，远程攻击者可通过特制 HTML 页面利用堆损坏。第九个 0day 是 CVE-2024-7971。Google 证实 CVE-2024-7971 和 CVE-2024-7965 两个漏洞正被利用，但没有披露更多信息。

A vulnerability classified as critical was found in Fortra FileCatalyst Workflow up to 5.1.6 Build 139. This vulnerability affects unknown code. The manipulation leads to sql injection. This vulnerability was named CVE-2024-6632. The attack can be initiated remotely. There is no exploit available.

ドライフラワーみたい

A vulnerability classified as critical has been found in Brain Information Technologies Brain Low-Code up to 2.0.x. This affects an unknown part. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2024-7071. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Fortra FileCatalyst Workflow up to 5.1.6 Build 139. It has been rated as problematic. Affected by this issue is some unknown functionality of the component HSQL Database. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2024-6633. The attack may be launched remotely. There is no exploit available.

With so many Large Language Models (LLMs) out there, selecting the right LLM is crucial for any org

Технологические гиганты поддержали закон о маркировке ИИ.

为工业企业打造全栈式工业互联网基础设施平台！

Key Takeaways News of a Google Cloud Storage bucket data leak has once again drawn public attenti

Key TakeawaysCISA has included a type of confusion vulnerability affecting Google

error code: 1106

Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on infiltrating critical U.S. networks and laying the groundwork for the ability to disrupt communications between the United States and Asia during any future armed conflict with China.