Aggregator

A vulnerability has been found in SiSMART 7.4.0 and classified as problematic. This vulnerability affects unknown code of the component Dashboard. The manipulation leads to improper control of resource identifiers. This vulnerability was named CVE-2024-48217. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in IBM CICS TX Standard 11.1. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2024-41744. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Draytek Vigor 3900 1.5.1.3. This affects the function modifyrow of the file mainfunction.cgi. The manipulation leads to command injection. This vulnerability is uniquely identified as CVE-2024-51248. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability classified as critical was found in Draytek Vigor 3900 1.5.1.3. Affected by this vulnerability is the function doPPPo of the file mainfunction.cgi. The manipulation leads to command injection. This vulnerability is known as CVE-2024-51247. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Apple tvOS up to 10.1. This affects an unknown part of the component Security. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2017-2485. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

The post Stop Supply Chain Invaders appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post Stop Supply Chain Invaders appeared first on Security Boulevard.

A vulnerability was found in Accellion Kiteworks up to <=7.5 and classified as critical. Affected by this issue is some unknown functionality of the file /opt/bin/cli. The manipulation leads to incorrect default permissions. This vulnerability is handled as CVE-2016-5662. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

What’s New in CJIS 5.9.5 as it Relates to Firmware Security? n the latest CJIS Security Policy, the FBI is now requiring that IT firmware be verified for integrity and monitored for unauthorized changes. Failure to comply with it can lead to denial of access to information in the CJIS system, as well as monetary […]

The post Getting the Gist of CJIS - 5.9.5 appeared first on Eclypsium | Supply Chain Security for the Modern Enterprise.

The post Getting the Gist of CJIS – 5.9.5 appeared first on Security Boulevard.

A vulnerability was found in PSAUX CyberPanel 2.3.6/2.3.7. It has been classified as very critical. This affects the function getresetstatus of the file dns/views.py. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2024-51378. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

以国产化终端筑牢数字世界安全防线，以网络安全保险为网安故障兜底

Misconfigurations, weak authentication, and logic flaws are among the main drivers of API security risks at many organizations.

A vulnerability has been found in Apple watchOS up to 3.1 and classified as critical. This vulnerability affects unknown code of the component Security. The manipulation leads to use after free. This vulnerability was named CVE-2017-2485. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

In Q3 2024 Law enforcement actions disrupted infrastructure and publicized the identity of several prolific ransomware threat actors

RansomHub Ransomware Has Claimed Hellenic Open University as a Victim

A vulnerability, which was classified as critical, has been found in @1 File Store. Affected by this issue is some unknown functionality of the file control/folders/access.php. The manipulation of the argument id leads to sql injection. This vulnerability is handled as CVE-2006-1278. The attack may be launched remotely. Furthermore, there is an exploit available.