Aggregator

禁漫天堂/哔咔/拷贝/哔哩漫画下载器

Submit #454852 / VDB-284530

Submit #454851 / VDB-284719

Hell froze over: FBI and NSA recommend you use strong encryption.

The post China is Still Inside US Networks — It’s Been SIX Months appeared first on Security Boulevard.

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-12183. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116. Affected by this issue is some unknown functionality of the file /member/soft_add.php. The manipulation of the argument body leads to cross site scripting. This vulnerability is handled as CVE-2024-12182. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploads_add.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. This vulnerability is known as CVE-2024-12181. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulation of the argument body leads to cross site scripting. This vulnerability is traded as CVE-2024-12180. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Submit #454846 / VDB-286907

Submit #454844 / VDB-286906

从忽视安全到设计安全，美国大型软件厂商大幅改进产品安全

价值超30亿元的数字货币被盗，这家交易所宣布关闭

Cloudflare Pages, a popular web deployment platform, is exploited by threat actors to host phishing sites, as attackers leverage Cloudflare’s trusted infrastructure, global CDN, and free hosting to quickly set up and deploy convincing phishing sites.  Automatic SSL/TLS encryption enhances the sites’ legitimacy, while custom domains and URL masking further obfuscate their malicious nature. Cloudflare’s […]

The post Cloudflare Developer Domains Abused For Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #453374 / VDB-286905

Submit #453003 / VDB-286904

Submit #452983 / VDB-286903

Submit #452969 / VDB-286902

A vulnerability was found in Thinkware Cloud APK 4.3.46. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to use of hard-coded cryptographic key . The identification of this vulnerability is CVE-2024-53614. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability was found in solana-labs solana-web3.js up to 1.95.7. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to information disclosure. This vulnerability was named CVE-2024-54134. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mister org.mistergroup.shouldianswer 1.4.264 on Android. It has been classified as critical. This affects an unknown part of the component DefaultDialerActivity Component. The manipulation leads to permission issues. This vulnerability is uniquely identified as CVE-2024-37575. It is possible to launch the attack on the local host. There is no exploit available.