Aggregator

梆梆安全

ANONYM∅US Defaced Multiple Websites

梆梆安全

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2023-0963. The attack may be initiated remotely. Furthermore, there is an exploit available.

Как работает прибыльный бизнес на краже мессенджер-аккаунтов?

Are you interested in digging a little deeper into how Tidal Cyber works? Our video library of brief demo tours shows how Tidal Cyber empowers security teams with Threat-Informed Defense. Each video dives into a different aspect of Tidal Cyber Enterprise Edition, so that in 5-minutes or less you can understand how to use a specific capability and the value it delivers.

The post Explore Tidal Cyber with our Demo Video Library appeared first on Security Boulevard.

A cyberattack in Israel allegedly disrupted communication services, causing widespread malfunction of credit card readers across the country on Sunday. The Jerusalem Post reported that thousands of credit card readers across at gas stations and supermarket chains in Israel stopped working on Sunday morning following an alleged DDoS attack that hit the company responsible for […]

A vulnerability, which was classified as problematic, has been found in LiveJournal up to 1.128. This issue affects some unknown processing of the file cleanhtml.pl. The manipulation leads to basic cross site scripting. The identification of this vulnerability is CVE-2005-4454. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

New phishing tool GoIssue targets GitHub, enabling mass phishing, and has been linked to the GitLoker extortion campaign

亚马逊证实在第三方供应商发生安全事故后其员工信息遭到泄露。亚马逊表示它以及 AWS 是安全的，没有发生安全事故。亚马逊称它收到通知，其物业管理供应商发生了安全事故，影响亚马逊在内的多个客户

The security vulnerability is due to an exposed Microsoft Message Queuing (MSMQ) instance and the use of the insecure BinaryFormatter.

We’re honored to share a new partnership with Orange Business (Norway), a global leader in digital services. ARMO

The post ARMO selected by Orange Business to Secure its Managed Kubernetes Services appeared first on ARMO.

The post ARMO selected by Orange Business to Secure its Managed Kubernetes Services appeared first on Security Boulevard.

A vulnerability, which was classified as problematic, has been found in Siemens S7-PCT, Security Configuration Tool, SIMATIC Automation Tool, SIMATIC BATCH V9.1, SIMATIC NET PC Software, SIMATIC PCS, SIMATIC PDM, SIMATIC Route Control , SIMATIC STEP, SIMATIC WinCC OA, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC Unified PC Runtime, SIMATIC WinCC , SINAMICS Startdrive, SINUMERIK ONE Virtual, SINUMERIK PLC Programming Tool, TIA Portal Cloud Connector and Totally Integrated Automation Portal. Affected by this issue is some unknown functionality. The manipulation leads to out-of-bounds read. This vulnerability is handled as CVE-2023-46280. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ch/qos/logback/core/net/ssl/SSL.java of the component Keystore Handler. The manipulation of the argument DEFAULT_KEYSTORE_PASSWORD with the input changeit leads to use of hard-coded password. This vulnerability is handled as CVE-2024-11026. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in OS4Ed openSIS-Classic 9.1 and classified as critical. This vulnerability affects unknown code of the file resetuserinfo.php. The manipulation of the argument username_stn_id leads to sql injection. This vulnerability was named CVE-2024-51211. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Hoosk 1.7.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file config.php. The manipulation leads to Privilege Escalation. This vulnerability is handled as CVE-2024-51055. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in confidential-containers trustee up to 0.8.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component ART Token Handler. The manipulation leads to improper authentication. This vulnerability is known as CVE-2024-51997. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in hopetree izone c011b48. Affected by this vulnerability is the function push_urls/get_urls of the file \apps\tool\apis\bd_push.py. The manipulation leads to server-side request forgery. This vulnerability is known as CVE-2024-50811. The attack needs to be done within the local network. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in hopetree izone c011b48. Affected by this issue is the function AddCommintView of the file \apps\comment\views.py of the component Article Comment Handler. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-50810. The attack may be launched remotely. There is no exploit available.