Aggregator

Currently trending CVE - hypeScore: 1 - Windows OLE Remote Code Execution Vulnerability

HackerNews 编译，转载请注明出处： 据网络安全公司 Sucuri 报告，威胁行为者正在利用 Google Tag Manager（GTM）向基于 Magento 的电商网站部署信用卡窃取恶意软件。 这些恶意代码表面上看似用于网站分析和广告目的的常规 GTM 和 Google Analytics 脚本，但实际上包含了一个混淆的后门，能够为攻击者提供持续访问权限。截至发稿时，已有三个网站被发现感染了相关 GTM 标识符（GTM-MLHK2N68），低于 Sucuri 报告的六个。GTM 标识符是指包含各种跟踪代码（如 Google Analytics、Facebook Pixel）和在满足特定条件时触发的规则的容器。 进一步分析显示，恶意软件是从 Magento 数据库表 “cms_block.content” 中加载的，GTM 标签包含一个编码的 JavaScript 负载，用作信用卡窃取器。安全研究员 Puja Srivastava 表示：“该脚本旨在收集用户在结账过程中输入的敏感数据，并将其发送到攻击者控制的远程服务器。” 恶意软件执行后，会从结账页面窃取信用卡信息并发送到外部服务器。这并非 GTM 首次被用于恶意目的。2018 年 4 月，Sucuri 曾揭露该工具被用于恶意广告活动。 此次事件发生在该公司详细描述另一场 WordPress 活动数周之后，该活动可能利用插件漏洞或受攻击的管理员账户安装恶意软件，将网站访客重定向至恶意 URL。   消息来源：The Hacker News, 编译：zhongx；  本文由 HackerNews.cc 翻译整理，封面来源于网络；   转载请注明“转自 HackerNews.cc”并附上原文

A vulnerability classified as critical has been found in ProfileGrid Plugin up to 5.8.3 on WordPress. This affects an unknown part. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2024-3606. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in SourceCodester Home Clean Service System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file \admin\student.add.php of the component Photo Handler. The manipulation leads to unrestricted upload. This vulnerability is handled as CVE-2024-3948. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Tuya U6N 3.2.5. It has been declared as critical. This vulnerability affects unknown code of the component Packet Handler. The manipulation leads to denial of service. This vulnerability was named CVE-2024-32268. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Employee/edit-photo.php. The manipulation of the argument userImage leads to unrestricted upload. This vulnerability was named CVE-2024-4500. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in SourceCodester Prison Management System 1.0. This vulnerability affects unknown code of the file /Employee/edit-profile.php. The manipulation of the argument txtfullname/txtdob/txtaddress/txtqualification/cmddept/cmdemployeetype/txtappointment leads to cross site scripting. This vulnerability was named CVE-2024-4512. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /Admin/user-record.php. The manipulation of the argument txtfullname leads to cross site scripting. This vulnerability is known as CVE-2024-4528. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in Samsung Mobile Devices. Affected by this vulnerability is the function setCocktailHostCallbacks of the component Callback Handler. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-20858. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Samsung Mobile Devices and classified as problematic. This issue affects the function startListening of the component CocktailBarService. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2024-20857. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Samsung Mobile Devices. It has been classified as problematic. Affected is an unknown function of the component FactoryCamera. The manipulation leads to missing authorization. This vulnerability is traded as CVE-2024-20859. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Samsung Mobile Devices. It has been rated as critical. Affected by this issue is some unknown functionality of the component SveService. The manipulation leads to use after free. This vulnerability is handled as CVE-2024-20861. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Samsung Mobile Devices. This affects an unknown part of the component SveService. The manipulation leads to out-of-bounds write. This vulnerability is uniquely identified as CVE-2024-20862. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Samsung Mobile Devices. This vulnerability affects unknown code of the component HAL. The manipulation leads to out-of-bounds write. This vulnerability was named CVE-2024-20863. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Samsung Mobile Devices. This issue affects some unknown processing of the component Bootloader. The manipulation leads to improper authentication. The identification of this vulnerability is CVE-2024-20865. It is possible to launch the attack on the physical device. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Agile Engineering Data Management 6.2.0/6.2.1 and classified as problematic. This issue affects some unknown processing of the component Apache Tomcat. The manipulation leads to open redirect. The identification of this vulnerability is CVE-2018-11784. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

新闻速览 工信部CSTIS：防范PLAYFULGHOST恶意软件风险 LLMjacking攻击升级，黑客以月租 […]

在不断演进的网络安全领域,形势变化迅速,威胁行为者步伐飞快,组织则在努力跟上步伐。对手比以往任何时候都更快渗透 […]

香港网络安全生态环境

香港网络安全生态环境