Aggregator

Full Disclosuremailing list archivesFrom: Martin Heiland via Fulldisclosure

Full Disclosuremailing list archivesFrom: Martin Heiland via Fulldisclosure

Full Disclosuremailing list archivesFrom: Sebastian Hamann via Fulldisclosure

Full Disclosuremailing list archivesFrom: Sebastian Hamann via Fulldisclosure

Full Disclosuremailing list archivesFrom: Sebastian Hamann via Fulldisclosure

Full Disclosuremailing list archivesFrom: Sebastian Hamann via Fulldisclosure

Full Disclosuremailing list archivesFrom: Sebastian Hamann via Fulldisclosure

Full Disclosuremailing list archivesFrom: Sebastian Hamann via Fulldisclosure

Full Disclosuremailing list archivesFrom: Sebastian Hamann via Fulldisclosure

Full Disclosuremailing list archivesFrom: Sebastian Hamann via Fulldisclosure

The malware builds on a near-field communication tool in combination with phishing and social engineering to steal cash.

The guidance is part of a coordinated, global effort to eradicate living-off-the-land techniques used against critical infrastructure.

Creativity and flexibility… Doing what matters… Shape the globe perspective… Is it your dream or dai

Dear readers & friends,It’s been a while, and I’m sorry for that. I’ve been suffering from a mild c

We all know Stream Decks are expensive. So I decided to make it for literally no money. I’ve been wo

A vulnerability, which was classified as critical, has been found in Versa Director. This issue affects some unknown processing of the component Change Favicon Option. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2024-39717. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Python CPython up to 3.13.0. This vulnerability affects the function namelist/iterdir/extractall of the component zipfile Module. The manipulation leads to infinite loop. This vulnerability was named CVE-2024-8088. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical has been found in SeaCMS 13.0. This affects an unknown part of the file admin_files.php. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2024-42599. It is possible to initiate the attack remotely. There is no exploit available.