【通知】全球拓展计划：征集英文版企业产品介绍
为了实现中国企业与全球市场的无缝对接，我们启动了一项全面的计划，旨在将优秀的中国企业推广到东南亚、中东、非洲和南美洲等全球各地。
Aggregator
【资讯】全球特定国家每日动态
3 months 2 weeks ago
全球特定国家每日动态。
CVE-2002-2357 | MailEnable 1.5015/1.5016/1.5017/1.5018 User memory corruption (EDB-22023 / XFDB-10652)
3 months 2 weeks ago
A vulnerability classified as critical was found in MailEnable 1.5015/1.5016/1.5017/1.5018. Affected by this vulnerability is an unknown functionality. The manipulation of the argument User leads to memory corruption.
This vulnerability is known as CVE-2002-2357. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
Qilin
3 months 2 weeks ago
You must login to view this content
cohenido
Stack Spoof-堆栈欺骗
3 months 2 weeks ago
本文通过Window x86_32栈回溯机制，详细讲述了两种基本堆栈欺骗的方式，最后讲述了DEFCON中STACKMOONWALK巧妙的堆栈欺骗方式。
Deep Dive into Endpoint Security – Tools and Best Practices for 2025
3 months 2 weeks ago
The endpoint security landscape in 2025 represents a sophisticated ecosystem of integrated technologies designed to protect increasingly diverse device environments. Organizations must navigate a complex terrain of EDR, XDR, and EPP solutions while implementing Zero Trust architectures and managing unprecedented endpoint diversity. This comprehensive analysis examines cutting-edge tools, provides technical implementation guidance, and establishes best […]
The post Deep Dive into Endpoint Security – Tools and Best Practices for 2025 appeared first on Cyber Security News.
CISO Advisory
Safepay
3 months 2 weeks ago
You must login to view this content
cohenido
Safepay
3 months 2 weeks ago
You must login to view this content
cohenido
CVE-2023-45696 | HCL Sametime up to 12.0.1 FP1 Legacy Web Chat Client information disclosure (KB0109082 / EUVD-2023-49985)
3 months 2 weeks ago
A vulnerability was found in HCL Sametime up to 12.0.1 FP1 and classified as problematic. This issue affects some unknown processing of the component Legacy Web Chat Client. The manipulation leads to information disclosure.
The identification of this vulnerability is CVE-2023-45696. It is possible to launch the attack on the physical device. There is no exploit available.
vuldb.com
CVE-2023-37530 | HCL BigFix Platform up to 9.5.23/10.0.10 Web Reports cross site scripting (KB0110209 / EUVD-2023-41417)
3 months 2 weeks ago
A vulnerability classified as problematic was found in HCL BigFix Platform up to 9.5.23/10.0.10. This vulnerability affects unknown code of the component Web Reports. The manipulation leads to cross site scripting.
This vulnerability was named CVE-2023-37530. The attack can be initiated remotely. There is no exploit available.
vuldb.com
CVE-2023-37529 | HCL BigFix Platform up to 9.5.23/10.0.10 Web Reports cross site scripting (KB0110209 / EUVD-2023-41416)
3 months 2 weeks ago
A vulnerability, which was classified as problematic, has been found in HCL BigFix Platform up to 9.5.23/10.0.10. This issue affects some unknown processing of the component Web Reports. The manipulation leads to cross site scripting.
The identification of this vulnerability is CVE-2023-37529. The attack may be initiated remotely. There is no exploit available.
vuldb.com
CVE-2024-3056 | podman up to 5.0.0-dev Shared IPC Namespace denial of service (EUVD-2024-2652)
3 months 2 weeks ago
A vulnerability, which was classified as problematic, was found in podman up to 5.0.0-dev. Affected is an unknown function of the component Shared IPC Namespace Handler. The manipulation leads to denial of service.
This vulnerability is traded as CVE-2024-3056. The attack needs to be initiated within the local network. There is no exploit available.
vuldb.com
OpenAI is hopeful GPT-5 will compete a little more
3 months 2 weeks ago
OpenAI's next big foundational model is GPT-5, and the AI startup is hoping that the model will compete a little more with rivals. [...]
Mayank Parmar
CVE-2022-38877 | Garage Management System 1.0 editProductImage.php?id=1 unrestricted upload (EUVD-2022-41434)
3 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in Garage Management System 1.0. This issue affects some unknown processing of the file ip/garage/php_action/editProductImage.php?id=1. The manipulation leads to unrestricted upload.
The identification of this vulnerability is CVE-2022-38877. The attack may be initiated remotely. There is no exploit available.
vuldb.com
CVE-2022-38832 | School Activity Updates with SMS Notification 1.0 index.php?view=edit ID sql injection
3 months 2 weeks ago
A vulnerability, which was classified as critical, was found in School Activity Updates with SMS Notification 1.0. Affected is an unknown function of the file /activity/admin/modules/department/index.php?view=edit. The manipulation of the argument ID leads to sql injection.
This vulnerability is traded as CVE-2022-38832. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com
CVE-2022-38833 | School Activity Updates with SMS Notification 1.0 index.php?view=view ID sql injection
3 months 2 weeks ago
A vulnerability has been found in School Activity Updates with SMS Notification 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /activity/admin/modules/modstudent/index.php?view=view. The manipulation of the argument ID leads to sql injection.
This vulnerability is known as CVE-2022-38833. The attack can be launched remotely. There is no exploit available.
vuldb.com
CVE-2022-38878 | School Activity Updates with SMS Notification 1.0 index.php?view=edit ID sql injection
3 months 2 weeks ago
A vulnerability was found in School Activity Updates with SMS Notification 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /activity/admin/modules/event/index.php?view=edit. The manipulation of the argument ID leads to sql injection.
This vulnerability is handled as CVE-2022-38878. The attack may be launched remotely. There is no exploit available.
vuldb.com
CVE-2022-2912 | Craw Data Plugin up to 1.0.0 on WordPress url server-side request forgery
3 months 2 weeks ago
A vulnerability was found in Craw Data Plugin up to 1.0.0 on WordPress and classified as critical. This issue affects some unknown processing. The manipulation of the argument url leads to server-side request forgery.
The identification of this vulnerability is CVE-2022-2912. Access to the local network is required for this attack to succeed. There is no exploit available.
vuldb.com
CVE-2022-2913 | Login No Captcha reCAPTCHA Plugin up to 1.6 on WordPress Login Screen authorization
3 months 2 weeks ago
A vulnerability was found in Login No Captcha reCAPTCHA Plugin up to 1.6 on WordPress. It has been classified as critical. Affected is an unknown function of the component Login Screen. The manipulation leads to authorization bypass.
This vulnerability is traded as CVE-2022-2913. The attack needs to be approached within the local network. There is no exploit available.
It is recommended to upgrade the affected component.
vuldb.com
CVE-2021-42949 | HotelDruid Hotel Management Software 3.0.3 controlla_login improper authentication
3 months 2 weeks ago
A vulnerability has been found in HotelDruid Hotel Management Software 3.0.3 and classified as problematic. This vulnerability affects the function controlla_login. The manipulation leads to improper authentication.
This vulnerability was named CVE-2021-42949. The attack can be initiated remotely. There is no exploit available.
vuldb.com