Aggregator

A vulnerability classified as problematic was found in Process Maker pm4core-docker 4.1.21-RC7. Affected by this vulnerability is an unknown functionality of the component UI Login Page Logo Upload. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-41454. The attack can be launched remotely. There is no exploit available.

Telegram 以侵犯版权为由关闭了 Z-Library 和 Anna's Archive 两大频道。Z-Library 是 Telegram 上最受欢迎的电子书相关频道，有逾 63 万名订阅用户。为了避免因侵犯版权而被删除内容，Z-Library 没有上传或直接链接侵权内容，它甚至没有发布自己的网站链接。Anna's Archive 频道的情况类似。尽管如此，两大频道被同时删除意味着可能与同一项投诉或决策有关。尝试访问两大频道的用户都会看到因侵权而无法访问的信息。

国家计算机病毒应急处理中心依据《网络安全法》《个人信息保护法》《App违法违规收集使用个人信息行为认定方法》等法律法规及相关国家标准要求，近期通过互联网监测发现16款移动App存在隐私不合规行为。1、

最新发现开源漏洞扫描器 Nuclei 中现已修复的漏洞可能允许攻击者绕过签名验证，同时将恶意代码潜入在本地系统上执行的模板中。Nuclei 是 ProjectDiscovery 创建的一款流行的开源漏

国家计算机病毒应急处理中心近期发现16款移动App存在隐私不合规行为。

YAML 模板还包括一个代码协议，可用于在扩展模板功能的设备上本地执行命令或脚本。

主站 分类 漏洞 工具 极客

超过660000台暴露的Rsync服务器可能受到六个新漏洞的攻击，其中包含一个严重程度极高的堆缓冲区溢出漏洞。

Apple Inc. has officially opened applications for its highly anticipated Information Security Internship, aimed at students eager to dive into the dynamic world of cybersecurity. This opportunity is ideal for aspiring professionals looking to enhance their skills within one of the most prestigious technology companies globally. The Apple Information Security team protects the company’s critical […]

The post Apple Announces Information Security Internship For Students – Apply Now appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

本文尝试大模型赋能恶意软件分析，基础文章探索，希望您喜欢！

The Cybersecurity and Infrastructure Security Agency (CISA) has released the “Microsoft Expanded Cloud Logs Implementation Playbook.” This guide is geared towards enabling organizations to effectively utilize the new logging capabilities introduced in Microsoft Purview Audit (Standard), enhancing their ability to detect and respond to advanced intrusion techniques. Overview of New Logging Capabilities The playbook outlines […]

The post CISA Released Guide to Microsoft Expanded Cloud Playbook appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

#安全资讯 非常流行的文件同步工具 rsync 出现多个高危安全漏洞，借助漏洞攻击者可以窃取数据甚至在服务器上执行任意代码。攻击者如果借助最严重的漏洞，只需要对使用 rsync 的服务

Компания Realbotix решила неожиданно сменить специализацию.

I starting out on an art business. It's new so i don't have many reviews or followers. I w

A vulnerability was found in Premium Addons for Elementor Plugin up to 4.10.31 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2024-4205. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Premium Addons for Elementor Plugin up to 4.10.31 on WordPress. This affects an unknown part of the component Global Tooltip. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-4379. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Premium Addons for Elementor Plugin up to 4.10.31 on WordPress. This vulnerability affects unknown code of the component Fancy Text Widget. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-4376. The attack can be initiated remotely. There is no exploit available.

A vulnerability classified as problematic was found in Mitsubishi Electric MELSEC iQ-F Series FX5U-32MT, ES, MELSEC iQ-F Series FX5U-64MT, MELSEC iQ-F Series FX5U-80MT, MELSEC iQ-F Series FX5U-32MR, MELSEC iQ-F Series FX5U-64MR, MELSEC iQ-F Series FX5U-80MR, DS, ESS, DSS, MELSEC iQ-F Series FX5UC-32MT, D, MELSEC iQ-F Series FX5UC-64MT, MELSEC iQ-F Series FX5UC-96MT, DS-TS, DSS-TS, MELSEC iQ-F Series FX5UC-32MR, MELSEC iQ-F Series FX5UJ-24MT, MELSEC iQ-F Series FX5UJ-40MT, MELSEC iQ-F Series FX5UJ-60MT, MELSEC iQ-F Series FX5UJ-24MR, MELSEC iQ-F Series FX5UJ-40MR, MELSEC iQ-F Series FX5UJ-60MR, ES-A, MELSEC iQ-F Series FX5S-30MT, MELSEC iQ-F Series FX5S-40MT, MELSEC iQ-F Series FX5S-60MT, MELSEC iQ-F Series FX5S-80MT, MELSEC iQ-F Series FX5S-30MR, MELSEC iQ-F Series FX5S-40MR, MELSEC iQ-F Series FX5S-60MR and MELSEC iQ-F Series FX5S-80MR. Affected by this vulnerability is an unknown functionality of the component Ethernet Handler. The manipulation leads to insufficient resource pool. This vulnerability is known as CVE-2023-7033. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Linux Kernel up to 6.1.62/6.5.11/6.6.1. It has been declared as problematic. This vulnerability affects the function blk_cleanup_disk of the component nbd. The manipulation leads to use after free. This vulnerability was named CVE-2023-52837. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 5.14.14. This issue affects the function page_is_secretmem. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2021-47463. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.