Aggregator

A vulnerability classified as problematic has been found in Zyxel AX7501-B0. Affected is an unknown function of the component Configuration File. The manipulation leads to cleartext storage of sensitive information. This vulnerability is traded as CVE-2022-45439. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mitsubishi Electric/ICONICS GENESIS64 10.97.2 CFR1/10.97.2 CRF2/10.97.2/10.97.3 and classified as critical. This issue affects some unknown processing of the component DLL Handler. The manipulation leads to dead code. The identification of this vulnerability is CVE-2024-8300. The attack needs to be approached locally. There is no exploit available.

A vulnerability was found in Mitsubishi Electric GENESIS64 and MC Works64. It has been classified as critical. Affected is an unknown function of the component DLL Handler. The manipulation leads to uncontrolled search path. This vulnerability is traded as CVE-2024-9852. An attack has to be approached locally. There is no exploit available.

A vulnerability was found in Mitsubishi Electric GENESIS64 and MC Works64. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component DLL Handler. The manipulation leads to uncontrolled search path. This vulnerability is known as CVE-2024-8299. Local access is required to approach this attack. There is no exploit available.

A vulnerability was found in WP Hide & Security Enhancer Plugin up to 2.5.1 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing authorization. This vulnerability is known as CVE-2024-11585. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as critical was found in YouTube Gallery and Vimeo Gallery Plugin up to 2.4.2 on WordPress. This vulnerability affects unknown code. The manipulation leads to sql injection. This vulnerability was named CVE-2024-10247. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Arbitrary Plugin up to 1.0.7 on WordPress. Affected is an unknown function of the component Installation Handler. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2024-10578. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as critical was found in Login with OTP Plugin up to 1.4.2 on WordPress. This vulnerability affects unknown code. The manipulation leads to improper authentication. This vulnerability was named CVE-2024-11178. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Apple macOS. It has been classified as critical. Affected is an unknown function of the component Hidden Photos Album. The manipulation leads to improper authentication. This vulnerability is traded as CVE-2024-23255. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

让我康康

一文揭晓

 The Django team has issued critical security updates for versions 5.1.4, 5.0.10, and 4.2.17. These updates address two vulnerabilities: a potential denial-of-service (DoS) attack in the strip_tags() method and a high-severity SQL injection risk in Oracle databases. All developers and system administrators using affected versions are strongly encouraged to update to the newly released versions to ensure […]

The post Django Security Update, Patch for DoS & SQL Injection Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

立即查看漏洞详情

Spring Boot是一个开源的Java框架，用于简化创建生产级的RESTful服务和应用程序的过程。 然而，如果Spring Boot应用程序中存在安全漏洞，可利用这些漏洞来访问或修改应用程序的数据，或者获得未授权的系统访问权限。

Spring Boot是一个开源的Java框架，用于简化创建生产级的RESTful服务和应用程序的过程。 然而，如果Spring Boot应用程序中存在安全漏洞，可利用这些漏洞来访问或修改应用程序的数据，或者获得未授权的系统访问权限。

疑似俄罗斯APT组织针对他国APT组织的基础设施展开攻击，扩大攻击范围——每周威胁情报动态第203期（11.29-12.05）

Spring Boot是一个开源的Java框架，用于简化创建生产级的RESTful服务和应用程序的过程。 然而，如果Spring Boot应用程序中存在安全漏洞，可利用这些漏洞来访问或修改应用程序的数据，或者获得未授权的系统访问权限。

News alert: One Identity wins 2024 Cyber Defense Award: Hot Company – PAM category