Aggregator

记一次SQL注入新用法

不安全
1 year 7 months ago
作者：Alivin原文地址：https://forum.butian.net/share/470在参加某市攻防演练的时候，发现目标站，经过一系列尝试，包括弱口令、SQL注入等等尝试后，未获得到有效的入

Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys

The Hackers News
1 year 7 months ago
Cybersecurity researchers have discovered a new malicious package on the Python Package Index (PyPI) repository that masquerades as a library from the Solana blockchain platform but is actually designed to steal victims' secrets. "The legitimate Solana Python API project is known as 'solana-py' on GitHub, but simply 'solana' on the Python software registry, PyPI," Sonatype researcher Ax Sharma
The Hacker News

CVE-2024-7680 | itsourcecode Tailoring Management System 1.0 /incedit.php id/inccat/desc/date/amount sql injection

VulDB Recent Entries
1 year 7 months ago
A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /incedit.php?id=4. The manipulation of the argument id/inccat/desc/date/amount leads to sql injection. This vulnerability is uniquely identified as CVE-2024-7680. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 6

Security Affairs
1 year 7 months ago
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Surge in Magniber ransomware attacks impact home users worldwide BlankBot – a new Android banking trojan with screen recording, keylogging and remote control capabilities   LianSpy: new Android spyware targeting Russian users   Cloud Cover: How Malicious Actors […]
Pierluigi Paganini

Managed ad