Aggregator

当前环境出现异常提示，请完成验证后继续访问。

当前环境出现异常，需完成验证后方可继续访问。

当前网络环境异常，请完成验证以继续访问。

OpenAI发布GPT-5提升性能与安全性；Google推出Jules编程工具；NVMe 2.3规范优化存储系统；微软测试游戏助手；LG展示高刷新率OLED面板；Intel支持AVX 10.2指令集；Apple考虑MacBook 5G功能；iPhone 17液态硅胶保护壳亮相。

r/deepweb是一个Reddit社区，旨在辟谣都市传说并分享来自Tor深网的真实可验证信息。

当前环境异常，请完成验证后继续访问。

微信：从一开始就没有「已读」功能，以后也不会有；蔚来高管称理想受难有人祸水东引；全球首家具身智能机器人 4S 店、北京首家机器人主题餐厅 8 月 8 日开业

A vulnerability was found in µD3TN up to 0.14.0. It has been declared as critical. This vulnerability affects unknown code of the component BPv7 Parser. The manipulation leads to reachable assertion. This vulnerability was named CVE-2024-10455. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Unified Communications Manager IM and Presence Service. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2024-20457. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Unified Communications Manager. It has been declared as problematic. This vulnerability affects unknown code of the component Web-based Management Interface. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-20511. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Cisco Unified Contact Center Management Portal. Affected is an unknown function of the component Web-based Management Interface. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-20540. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Cisco Firepower Management Center. This affects an unknown part of the component Administrative Web-based GUI Configuration Manager. The manipulation leads to cleartext storage of sensitive information in gui. This vulnerability is uniquely identified as CVE-2021-34751. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Firepower Threat Defense Software. It has been rated as critical. Affected by this issue is some unknown functionality of the component Ethernet Industrial Protocol. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2021-34753. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Kofax Power PDF. This vulnerability affects unknown code of the component JP2 File Parser. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-5512. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic has been found in Kofax Power PDF. Affected is an unknown function of the component JP2 File Parser. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-5511. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic was found in Kofax Power PDF. Affected by this vulnerability is an unknown functionality of the component JP2 File Parser. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2024-5510. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Kofax Power PDF. It has been rated as critical. This issue affects some unknown processing of the component JP2 File Parser. The manipulation leads to out-of-bounds write. The identification of this vulnerability is CVE-2024-5513. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical has been found in HashiCorp Vault and Vault Enterprise up to 1.18.0. Affected is an unknown function of the component API Endpoint. The manipulation leads to not failing securely. This vulnerability is traded as CVE-2024-8185. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Secure Email, Secure Email and Web Manager and Secure Web Appliance. It has been declared as problematic. This vulnerability affects unknown code of the component Web-based Management Interface. The manipulation leads to basic cross site scripting. This vulnerability was named CVE-2024-20504. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

The Kimsuky group has once again found itself at the center of attention following a campaign that deftly combined social engineering tactics with sophisticated techniques for bypassing Windows security mechanisms. Their targets included South...

The post Sophisticated Kimsuky Campaign: New Malware Bypasses Windows Defender appeared first on Penetration Testing Tools.