Aggregator

A vulnerability was found in SourceCodester Blog Site 1.0 and classified as problematic. This issue affects the function user_add of the file main.php. The manipulation of the argument name/email leads to cross site scripting. The identification of this vulnerability is CVE-2023-23019. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Supreme Modules Lite Plugin up to 2.5.3 on WordPress. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-4334. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in SourceCodester Product Show Room 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add Users. The manipulation of the argument Last Name leads to cross site scripting. This vulnerability is known as CVE-2024-33304. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in SourceCodester Employees Payroll Management System 1.0. This affects an unknown part of the file Main.php. The manipulation of the argument code/title/from_date/to_date leads to cross site scripting. This vulnerability is uniquely identified as CVE-2023-23022. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in SourceCodester POS Point Sale System 1.0 and classified as problematic. This vulnerability affects unknown code of the file Main.php. The manipulation of the argument code/name/description leads to cross site scripting. This vulnerability was named CVE-2023-23021. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in CMSimple 5.15. This issue affects some unknown processing of the component Settings Menu. The manipulation of the argument Downloads leads to cross site scripting. The identification of this vulnerability is CVE-2024-33424. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in ViewerJS 0.5.8. It has been rated as problematic. This issue affects some unknown processing of the component URL TAG Handler. The manipulation leads to open redirect. The identification of this vulnerability is CVE-2024-25676. The attack may be initiated remotely. There is no exploit available.

ShareFiltrator is a Python tool designed for enumerating and bulk downloading sensitive files from SharePoint and OneDrive using authenticated cookies. It leverages SharePoint’s search API to identify files with credentials, highlighting misconfigurations from lax sharing permissions. The tool aids in extracting secrets while also discussing mitigation strategies.

我们在日常狩猎中捕获到APT-C-47组织疑似针对知识产权行业的攻击样本，攻击者还是一如既往地使用ClickOnce技术投递下一阶段载荷，使用C#模块，以及C++模块经过层层递进，并最终内存加载Golang编译的远控木马

我们在日常狩猎中捕获到APT-C-47组织疑似针对知识产权行业的攻击样本，攻击者还是一如既往地使用ClickOnce技术投递下一阶段载荷，使用C#模块，以及C++模块经过层层递进，并最终内存加载Golang编译的远控木马

我们在日常狩猎中捕获到APT-C-47组织疑似针对知识产权行业的攻击样本，攻击者还是一如既往地使用ClickOnce技术投递下一阶段载荷，使用C#模块，以及C++模块经过层层递进，并最终内存加载Golang编译的远控木马

3月29日，2025年首站补天白帽黑客城市沙龙-西安站圆满收官。

3月29日，2025年首站补天白帽黑客城市沙龙-西安站圆满收官。

我们在日常狩猎中捕获到APT-C-47组织疑似针对知识产权行业的攻击样本，攻击者还是一如既往地使用ClickOnce技术投递下一阶段载荷，使用C#模块，以及C++模块经过层层递进，并最终内存加载Golang编译的远控木马

3月29日，2025年首站补天白帽黑客城市沙龙-西安站圆满收官。

我们在日常狩猎中捕获到APT-C-47组织疑似针对知识产权行业的攻击样本，攻击者还是一如既往地使用ClickOnce技术投递下一阶段载荷，使用C#模块，以及C++模块经过层层递进，并最终内存加载Golang编译的远控木马

3月29日，2025年首站补天白帽黑客城市沙龙-西安站圆满收官。

我们在日常狩猎中捕获到APT-C-47组织疑似针对知识产权行业的攻击样本，攻击者还是一如既往地使用ClickOnce技术投递下一阶段载荷，使用C#模块，以及C++模块经过层层递进，并最终内存加载Golang编译的远控木马

Google has unveiled end-to-end encryption (E2EE) capabilities for Gmail enterprise users, simplifying encrypted email communication for businesses of all sizes. This feature, launched in beta today to coincide with Gmail’s birthday, aims to bridge the gap between robust security and user-friendly functionality, allowing organizations to enhance data privacy without the traditional complexity of encryption setups. […]

The post Google Introduces End-to-End Encryption for Gmail Business Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

日前，市场监管总局发布《网络交易合规数据报送管理暂行办法》。市场监管总局网监司相关负责人就涉及《办法》的相关问题回答记者提问。