Aggregator

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞210个，其中高危漏洞94个、中危漏洞106个、低危漏洞10个。

上周关注度较高的产品安全漏洞(20250331-20250406)

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞210个，其中高危漏洞94个、中危漏洞106个、低危漏洞10个。

A vulnerability, which was classified as critical, has been found in Dutchmonkey DM FileManager 3.9.2. This issue affects some unknown processing of the file login.php. The manipulation leads to sql injection. The identification of this vulnerability is CVE-2009-1741. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to add further authentication.

With corporate layoffs and government workforce reductions frequently making headlines, leaders often underestimate the potential for massive data loss and intellectual property liability.

The post Corporate Layoffs Put Company IP at Risk  appeared first on Security Boulevard.

A vulnerability classified as problematic was found in Campcodes Complete Online Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file academic_year_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. This vulnerability is known as CVE-2024-3533. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/admin_user.php. The manipulation of the argument firstname leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-3541. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in Campcodes Church Management System 1.0. This vulnerability affects unknown code of the file /admin/add_visitor.php. The manipulation of the argument mobile leads to cross site scripting. This vulnerability was named CVE-2024-3542. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Bold Page Builder Plugin up to 4.8.8 on WordPress and classified as problematic. Affected by this issue is some unknown functionality of the component HTML Tag Handler. The manipulation leads to HTML injection. This vulnerability is handled as CVE-2024-2736. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Bold Page Builder Plugin up to 4.8.8 on WordPress. It has been classified as problematic. This affects an unknown part of the component Price List Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-2735. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Bold Page Builder Plugin up to 4.8.8 on WordPress. It has been declared as problematic. This vulnerability affects unknown code of the component AI Features. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-2734. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Premium Addons for Elementor Plugin up to 4.10.24 on WordPress. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-2666. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Premium Addons for Elementor Plugin up to 4.10.16 on WordPress. Affected is an unknown function of the component Wrapper Link Widget. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-0376. It is possible to launch the attack remotely. There is no exploit available.

Утечка раскрыла план ИИ создать себе преемника.

CAASM+AI+SOAR智能网络资产攻击面管理，为安全运营团队提供全面的资产可视性，以实现主动风险管理和运营效率

CAASM+AI+SOAR智能网络资产攻击面管理，为安全运营团队提供全面的资产可视性，以实现主动风险管理和运营效率

Уникальные архивы могут исчезнуть навсегда.

Cyber-attacks on Australian superannuation funds leave some savers out of pocket

A vulnerability was found in ESET NOD32 Antivirus, Internet Security, Smart Security Premium, Security Ultimate, Endpoint Antivirus for Windows, Endpoint Security for Windows, Small Business Security, Safe Server, Server Security for Windows Server, Mail Security for Microsoft Exchange Server and Security for Microsoft SharePoint Server. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to uncontrolled search path. The identification of this vulnerability is CVE-2024-11859. An attack has to be approached locally. There is no exploit available.