Aggregator

今日暂未更新资讯~
更多最新文章，请访问SecWiki

Submit #429927 / VDB-282633

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /pda/reportshop/next_detail.php. The manipulation of the argument repid leads to sql injection. This vulnerability is traded as CVE-2024-10619. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in Tongda OA 2017 up to 11.10. This issue affects some unknown processing of the file /pda/reportshop/record_detail.php. The manipulation of the argument repid leads to sql injection. The identification of this vulnerability is CVE-2024-10618. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in Tongda OA up to 11.10. This vulnerability affects unknown code of the file /pda/workflow/check_seal.php. The manipulation of the argument ID leads to sql injection. This vulnerability was named CVE-2024-10617. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Tongda OA up to 11.9. This affects an unknown part of the file /pda/workflow/webSignSubmit.php. The manipulation of the argument saleId leads to sql injection. This vulnerability is uniquely identified as CVE-2024-10616. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Tongda OA 2017 up to 11.10. It has been rated as critical. Affected by this issue is some unknown functionality of the file /general/approve_center/query/list/input_form/delete_data_attach.php. The manipulation of the argument RUN_ID leads to sql injection. This vulnerability is handled as CVE-2024-10615. The attack may be launched remotely. Furthermore, there is an exploit available.

《柳叶刀》旗下的《The Lancet Countdown》发布了第九份年度报告，称气候危机导致的高温死亡、粮食短缺和传染病传播达到创纪录水平。报告显示，2023 年是有记录以来最热的一年，持续干旱、致命热浪、毁灭性森林火灾、风暴和洪水，给全世界人民的健康、生命和生计带来灾难性的影响。2023 年，与没有气候变化的情况相比，人们前所未有地平均遭受比预期多 50 天的威胁健康的高温。在全球范围内，人们在进行轻度户外运动（如步行或骑自行车）时，平均有 1512 个小时暴露于至少中等程度的热应激风险的高温环境中。易受影响年龄人群（1岁以下婴儿与65岁及以上老人）在过去一年里平均经历了 13.8 天的“高温日”，这一数值比 2022 年创下的上一个纪录高出 20% 以上。2023 年因高温死亡的 65 岁以上老年人数量将比 1990-1999 年的平均水平增加 167%，达到有记录以来的最高值。

A Threat Actor is Allegedly Selling a Git Database From an Unidentified Atlanta, USA Internet Service Provider

With cybersecurity threats continuing to evolve at an accelerated pace, organizations need to ensure that their cyber insurance policies remain active at all times.

The post Safeguarding Cyber Insurance Policies With Security Awareness Training appeared first on Security Boulevard.

Submit #433514 / VDB-282630

Submit #433513 / VDB-282629

Submit #433510 / VDB-282628

Submit #433509 / VDB-282627

Submit #433500 / VDB-282626

A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/system/SystemEncryptPolicyService.java. The manipulation of the argument id leads to sql injection. This vulnerability is known as CVE-2024-10613. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function removeHookInvalidCourse of the file /com/esafenet/servlet/system/HookInvalidCourseService.java. The manipulation of the argument id leads to sql injection. This vulnerability is traded as CVE-2024-10612. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in ESAFENET CDG 5 and classified as critical. This issue affects the function delProtocol of the file /com/esafenet/servlet/system/PrintScreenListService.java. The manipulation of the argument id leads to sql injection. The identification of this vulnerability is CVE-2024-10611. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function delProtocol of the file /com/esafenet/servlet/system/ProtocolService.java. The manipulation of the argument id leads to sql injection. This vulnerability was named CVE-2024-10610. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Новые версии плагина стали ловушкой для пользователей.