Aggregator

SecWiki周刊（第571期) by ourren

更多最新文章，请访问SecWiki

Security researchers at Bishop Fox have published complete exploitation details for the CVE-2024-53704 vulnerability that allows bypassing the authentication mechanism in certain versions of the SonicOS SSLVPN application. [...]

State-led data privacy laws and commitment to enforcement play a major factor in shoring up business data security, an analysis shows.

Phobos Ransomware Affiliates Arrested in Global Crackdown

The U.S. Justice Department announced the names of two Phobos ransomware affiliates arrested yesterday in Thailand, charging them on 11 counts due to their involvement in more than a thousand cyberattacks. [...]

Progress Software fixed multiple vulnerabilities in its LoadMaster software, which could be exploited to execute arbitrary system commands. Progress Software has addressed multiple high-severity security vulnerabilities (CVE-2024-56131, CVE-2024-56132, CVE-2024-56133, CVE-2024-56134, CVE-2024-56135) in its LoadMaster software. Progress Software’s LoadMaster is a high-performance load balancer and application delivery controller (ADC) designed to optimize the availability, security, and performance of […]

Всего одна брешь в системе – и тысячи сетей становятся лёгкой добычей.

Lanvin Claims to have Leaked the Data of Taobento

A vulnerability was found in Observium CE 24.4.13528. It has been rated as problematic. This issue affects some unknown processing of the component VLAN Management. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-47002. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Observium CE 24.4.13528. Affected is an unknown function of the component Weather Map Editor. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-45061. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Observium CE 24.4.13528. Affected by this vulnerability is the function add_alert_check. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-47140. The attack can be launched remotely. There is no exploit available.

Февральский список угроз.

A vulnerability has been found in AMI AptioV up to BKS_5.38 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component BIOS. The manipulation leads to improper input validation. This vulnerability is known as CVE-2024-33659. It is possible to launch the attack on the local host. There is no exploit available.