Aggregator

error code: 521

HackerNews 编译，转载请注明出处： 一名使用@NSA_Employee39昵称的X平台用户声称，在开源文件归档软件7-Zip中发现了一个零日漏洞。该账号已通过X平台验证。 该用户宣布，本周将“连续曝光零日漏洞”，首个目标便是7-Zip软件中的任意代码执行漏洞。 攻击者可通过诱骗受害者打开精心制作的.7z归档文件，利用此漏洞在受害者系统上执行恶意代码。 用户已在Pastebin上发布了针对此零日漏洞的利用代码。Pastebin上的描述称：“此利用代码针对7-Zip软件中LZMA解码器的漏洞。它使用包含畸形LZMA数据流的.7z归档文件，在RC_NORM函数中触发缓冲区溢出条件。通过调整偏移量和有效载荷，利用代码操控内部缓冲区指针以执行shellcode，从而实现任意代码执行。当受害者使用7-Zip的易受攻击版本（当前版本）打开或解压归档文件时，利用代码将被触发，执行有效载荷以启动calc.exe（可自行更改）。” 然而，多位专家对此声明提出质疑，称该利用代码无效，所谓的零日漏洞并不存在。 7-Zip的作者伊戈尔·帕夫洛夫（Igor Pavlov）表示，该漏洞为伪造。他解释说，LZMA解码器中不存在RC_NORM函数。 帕夫洛夫写道：“普遍结论是，Twitter上这段伪造的利用代码是由LLM（AI）生成的。” “伪造代码中的注释包含以下声明： 此利用代码针对7-Zip软件中LZMA解码器的漏洞。它使用包含畸形LZMA数据流的.7z归档文件，在RC_NORM函数中触发缓冲区溢出条件。” 但LZMA解码器中不存在RC_NORM函数。相反，7-Zip在LZMA编码器和PPMD解码器中包含了RC_NORM宏。因此，LZMA解码代码不会调用RC_NORM。利用代码注释中关于RC_NORM的陈述是不真实的。”   消息来源：Security Affairs, 编译：zhongx；  本文由 HackerNews.cc 翻译整理，封面来源于网络；   转载请注明“转自 HackerNews.cc”并附上原文

A vulnerability, which was classified as critical, has been found in Microsoft Windows NT 4.0/2000/XP. Affected by this issue is some unknown functionality of the component Terminal Server. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2003-0003. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Microsoft Windows XP. It has been classified as critical. Affected is an unknown function of the component Redirector. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2003-0004. The attack needs to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Java Virtual Machine up to 5.0.3805. It has been rated as critical. Affected by this issue is the function com.ms.security.StandardSecurityManager of the component Standard Security Manager. The manipulation leads to improper privilege management. This vulnerability is handled as CVE-2002-1292. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, was found in Microsoft Windows NT 4.0/2000/XP. This affects an unknown part of the component RPC Endpoint Mapper. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2002-1561. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

时间过得很快，马上2025年了。想说的很多，不知道从哪开始说起。想写的很多，不知道怎么把它写好。对我来说，今年是非常忙碌和充实的一年，是压力倍增，压力巨大的一年，是充满着希望和绝望的一年。怀疑

时间过得很快，马上2025年了。想说的很多，不知道从哪开始说起。想写的很多，不知道怎么把它写好。对我来说，今年是非常忙碌和充实的一年，是压力倍增，压力巨大的一年，是充满着希望和绝望的一年。怀疑过自己，难受过，失意过，迷茫过，焦虑过，但是从没有停下脚步，一直在向前走。 今年我从漏洞挖掘者，安全测试人员

A vulnerability was found in Sun Solaris 7.0. It has been declared as critical. This vulnerability affects unknown code of the file kcms_configure. The manipulation of the argument NETPATH as part of Environment Variable leads to memory corruption. This vulnerability was named CVE-1999-0818. Local access is required to approach this attack. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

error code: 521

HackerNews 编译，转载请注明出处： 一名黑客从思科开发中心（DevHub）窃取数据并对外泄露，思科已确认这些数据属实，并指出它们源自近期披露的一起安全事件。 这名自称为IntelBroker的黑客于10月14日宣布，他与他人侵入了思科系统，获取了源代码、证书、凭证、机密文件、加密密钥等多种信息。 思科调查后发现，其系统并未被侵入，这些数据实际上是从一个面向公众的DevHub环境中获取的，该环境作为资源中心，为客户提供源代码、脚本等内容。 尽管DevHub中的大部分数据已公开，但思科承认，黑客获取的部分文件本不应公开。 随后，IntelBroker确认数据来自DevHub，并开始泄露文件。他最初声称获取了800GB的文件，但随后又称从DevHub环境中获取了4.5TB的数据。12月中旬，他公布了约3GB的数据，并在圣诞节当天又泄露了一批文件，总量超过4GB。 泄露的数据包括与思科产品相关的源代码、脚本、数字证书和配置文件。 思科在第二次数据泄露后表示，已对数据进行了分析，发现它们“与2024年10月14日已知的数据集一致”。 思科解释道：“如之前更新所述，我们确信系统没有受到攻击，并且在泄露的内容中任何可能被攻击者用来访问我们的生产或企业环境的信息。” 思科最初表示，没有证据表明敏感个人信息或财务数据遭到破坏，但已从事件报告中删除了这一声明。   消息来源：Security Week, 编译：zhongx；  本文由 HackerNews.cc 翻译整理，封面来源于网络；   转载请注明“转自 HackerNews.cc”并附上原文

A vulnerability classified as critical has been found in Mozilla Firefox and Thunderbird 14. Affected is the function eval of the component Web Console. The manipulation leads to code injection. This vulnerability is traded as CVE-2012-3980. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Mozilla Firefox and Thunderbird 14. Affected is an unknown function of the component XSLT Format-Number Feature. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2012-3972. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Mozilla Firefox and Thunderbird 14 on Windows and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Root Partition Executable Handler. The manipulation leads to improper resource management. This vulnerability is known as CVE-2012-3974. An attack has to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox 14. It has been classified as problematic. This affects the function OnLocationChange of the component SSL Certificate Handler. The manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2012-3976. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Mozilla Firefox and Thunderbird 14. It has been declared as problematic. This vulnerability affects the function nsLocation::CheckURL. The manipulation leads to improper access controls. This vulnerability was named CVE-2012-3978. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as very critical was found in Mozilla Firefox and Thunderbird 14. This vulnerability affects the function nsTArray_base::Length of the component Scalable Vector Graphics File Handler. The manipulation of the argument requiredFeatures leads to improper resource management. This vulnerability was named CVE-2012-3970. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Mozilla Firefox and Thunderbird 14. Affected by this vulnerability is the function nsSVGFEMorphologyElement::Filter of the component SVG File Value Addition Handler. The manipulation leads to numeric error. This vulnerability is known as CVE-2012-3969. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.