Aggregator
或因第三方数据遭泄露,诺基亚源代码被盗
2 months 2 weeks ago
正在调查中
思科满分漏洞可使黑客以root身份运行任意命令
2 months 2 weeks ago
速修复
0x0xba$e Allegedly is Selling Data of Hospital Universitario Clinica San Rafael
2 months 2 weeks ago
0x0xba$e Allegedly is Selling Data of Hospital Universitario Clinica San Rafael
Dark Web Informer
Nejoum Al Jazeera Has Been Claimed a Victim to DARKVAULT Ransomware
2 months 2 weeks ago
Nejoum Al Jazeera Has Been Claimed a Victim to DARKVAULT Ransomware
Dark Web Informer
Nokia says hackers leaked third-party app source code
2 months 2 weeks ago
Nokia's investigation of recent claims of a data breach found that the source code leaked on a hacker forum belongs to a third party and company and customer data has not been impacted. [...]
Bill Toulas
Dark Vault
2 months 2 weeks ago
cohenido
定档11月16日 OWASP北京安全技术论坛即将召开
2 months 2 weeks ago
探讨如何通过新技术、新策略构建全面智能、高效的安全治理体系。
标准解读 | 绿盟科技参与制定的两项软件供应链安全国家标准正式实施
2 months 2 weeks ago
标准引领高质量发展,绿盟科技助力软件供应链安全标准化建设。
案例征集 | 金融行业高风险严监管 企业需要怎样的安全保障?
2 months 2 weeks ago
对七大行业进行供需两端的市场及技术趋势分析,今天走进金融行业。
CVE-2020-11919 | Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14 cross-site request forgery
2 months 2 weeks ago
A vulnerability was found in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery.
This vulnerability was named CVE-2020-11919. The attack can be initiated remotely. There is no exploit available.
vuldb.com
CVE-2024-48951 | Logpoint up to 7.4.x SOAR server-side request forgery
2 months 2 weeks ago
A vulnerability was found in Logpoint up to 7.4.x. It has been classified as problematic. This affects an unknown part of the component SOAR. The manipulation leads to server-side request forgery.
This vulnerability is uniquely identified as CVE-2024-48951. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-51428 | Espressif ESP-IDF 5.3.0 Channel Packet denial of service
2 months 2 weeks ago
A vulnerability was found in Espressif ESP-IDF 5.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Channel Packet Handler. The manipulation leads to denial of service.
This vulnerability is handled as CVE-2024-51428. Access to the local network is required for this attack. There is no exploit available.
vuldb.com
CVE-2024-51989 | pglombardo PasswordPusher up to 1.48.0 cross site scripting
2 months 2 weeks ago
A vulnerability has been found in pglombardo PasswordPusher up to 1.48.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting.
This vulnerability is known as CVE-2024-51989. The attack can be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-45794 | devtron up to 0.7.1 CreateUser API /orchestrator/user sql injection
2 months 2 weeks ago
A vulnerability, which was classified as critical, was found in devtron up to 0.7.1. Affected is an unknown function of the file /orchestrator/user of the component CreateUser API. The manipulation leads to sql injection.
This vulnerability is traded as CVE-2024-45794. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-48954 | Logpoint up to 7.4.x EventHub Collector Setup improper authentication
2 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in Logpoint up to 7.4.x. This issue affects some unknown processing of the component EventHub Collector Setup. The manipulation leads to improper authentication.
The identification of this vulnerability is CVE-2024-48954. The attack may be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2024-51758 | filament up to 3.2.122 default_filesystem_disk insecure default initialization of resource
2 months 2 weeks ago
A vulnerability classified as problematic was found in filament up to 3.2.122. This vulnerability affects the function default_filesystem_disk. The manipulation leads to insecure default initialization of resource.
This vulnerability was named CVE-2024-51758. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2020-11921 | Lovense Lush up to 2020-02-25 Bluetooth cleartext transmission
2 months 2 weeks ago
A vulnerability classified as problematic has been found in Lovense Lush up to 2020-02-25. This affects an unknown part of the component Bluetooth. The manipulation leads to cleartext transmission of sensitive information.
This vulnerability is uniquely identified as CVE-2020-11921. The attack needs to be approached within the local network. There is no exploit available.
vuldb.com
CVE-2020-11926 | Luvion Grand Elite 3 Connect up to 2020-02-25 improper authentication
2 months 2 weeks ago
A vulnerability was found in Luvion Grand Elite 3 Connect up to 2020-02-25. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to improper authentication.
This vulnerability is handled as CVE-2020-11926. The attack may be launched remotely. There is no exploit available.
vuldb.com
Linux Man pages 维护者获得赞助恢复工作
2 months 2 weeks ago
过去四年担任 Linux Man pages 维护者的 Alejandro Colomar 在今年 9 月宣布暂停工作。Man pages 是 manual page 的缩写。Alejan