Aggregator

「众智维科技」获数千万B1轮融资，安全运营智能体：智能，安全，未来!

基于 llamafile 和 Continue 的本地AI代码助手

Cybersecurity researchers are warning that thousands of servers hosting the Prometheus monitoring and alerting toolkit are at risk of information leakage and exposure to denial-of-service (DoS) as well as remote code execution (RCE) attacks. "Prometheus servers or exporters, often lacking proper authentication, allowed attackers to easily gather sensitive information, such as credentials and API

New dog, old tricks: DaMAgeCard attack targets memory directly thru SD card reader

A vulnerability, which was classified as problematic, was found in Huawei HarmonyOS 5.0.0. This affects an unknown part of the component UIExtension Module. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2024-54118. Attacking locally is a requirement. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in Huawei HarmonyOS 5.0.0. Affected by this issue is some unknown functionality of the component UIExtension Module. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2024-54117. Local access is required to approach this attack. There is no exploit available.

A vulnerability classified as problematic was found in Huawei HarmonyOS 5.0.0. Affected by this vulnerability is an unknown functionality of the component M3U8 Module. The manipulation leads to improper check for unusual conditions. This vulnerability is known as CVE-2024-54116. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in Huawei HarmonyOS 5.0.0. Affected is an unknown function of the component Ability Module. The manipulation leads to race condition. This vulnerability is traded as CVE-2024-54122. The attack needs to be approached locally. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS 5.0.0. It has been rated as problematic. This issue affects some unknown processing of the component UIExtension Module. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2024-54119. It is possible to launch the attack on the local host. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS 5.0.0. It has been declared as problematic. This vulnerability affects unknown code of the component DASH Module. The manipulation leads to improper check for unusual conditions. This vulnerability was named CVE-2024-54115. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS 5.0.0. It has been classified as problematic. This affects an unknown part of the component DASH Module. The manipulation leads to improper check for unusual conditions. This vulnerability is uniquely identified as CVE-2024-54114. Local access is required to approach this attack. There is no exploit available.

A vulnerability was found in Huawei HarmonyOS 5.0.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Print Module. The manipulation leads to denial of service. This vulnerability is handled as CVE-2024-54113. An attack has to be approached locally. There is no exploit available.

活动预告｜CodeWisdom 智能汽车基础软件学术报告系列 第5期：融合网关车控域基础软件平台化思考

Europol Dismantles 27 DDoS Attack Platforms Across 15 Nations; Admins Arrested

俄罗斯测试切断与全球互联网的接入

A vulnerability has been found in Huawei HarmonyOS 5.0.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component UIExtension Module. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-54112. The attack needs to be approached locally. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Huawei HarmonyOS 5.0.0. Affected is an unknown function of the component Image Decoding Module. The manipulation leads to insufficient verification of data authenticity. This vulnerability is traded as CVE-2024-54111. It is possible to launch the attack on the local host. There is no exploit available.