Aggregator

CVE-2024-34891 | 1C-Bitrix Bitrix24 23.300.100 DAV Server Setting insufficiently protected credentials

9 months 2 weeks ago

A vulnerability has been found in 1C-Bitrix Bitrix24 23.300.100 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component DAV Server Setting Handler. Performing manipulation results in insufficiently protected credentials. This vulnerability is identified as CVE-2024-34891. The attack can be initiated remotely. There is not any exploit available.

vuldb.com

CVE-2024-50614 | TinyXML2 up to 10.0.0 tinyxml2.cpp XMLUtil::GetCharacterRef assertion (Issue 996 / Nessus ID 253681)

Vuldb Updates

9 months 2 weeks ago

A vulnerability was found in TinyXML2 up to 10.0.0. It has been declared as problematic. This impacts the function XMLUtil::GetCharacterRef of the file tinyxml2.cpp. The manipulation results in reachable assertion. This vulnerability is cataloged as CVE-2024-50614. The attack must originate from the local network. There is no exploit available.

vuldb.com

CVE-2024-48057 | localai up to 2.20.1 Model API cross site scripting (Nessus ID 212587)

Vuldb Updates

9 months 2 weeks ago

A vulnerability, which was classified as problematic, was found in localai up to 2.20.1. Impacted is an unknown function of the component Model API Handler. The manipulation results in cross site scripting. This vulnerability was named CVE-2024-48057. The attack may be performed from remote. There is no available exploit.

vuldb.com

CVE-2024-45175 | za-internet C-MOR Video Surveillance 5.2401 cleartext storage (SYSS-2024-028)

Vuldb Updates

9 months 2 weeks ago

A vulnerability, which was classified as problematic, has been found in za-internet C-MOR Video Surveillance 5.2401. Impacted is an unknown function. This manipulation causes cleartext storage of sensitive information. This vulnerability is registered as CVE-2024-45175. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

vuldb.com

CVE-2024-45171 | za-internet C-MOR Video Surveillance 5.2401 /srv/www/backups unrestricted upload (SYSS-2024-026)

Vuldb Updates

9 months 2 weeks ago

A vulnerability identified as critical has been detected in za-internet C-MOR Video Surveillance 5.2401. Affected is an unknown function of the file /srv/www/backups. This manipulation causes unrestricted upload. The identification of this vulnerability is CVE-2024-45171. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

vuldb.com

Texas sues PowerSchool for breach exposing the data of students and teachers

The Record

9 months 2 weeks ago

More than 880,000 Texans were affected by the breach at education tech provider PowerSchool, state Attorney General Ken Paxton noted in filing a lawsuit against the company.

Atlassian 以 6.1 亿美元收购 Browser Company

Solidot

9 months 2 weeks ago

Atlassian 以 6.1 亿美元现金收购浏览器 Arc 和 Dia 的开发商 Browser Company。其中 Arc 已经停止更新，而 Dia 则是所谓的 AI 浏览器。这笔交易预计将于 12 月完成。Browser Company 成立于 2019 年，2022 年推出了一度备受瞩目的自定义浏览器 Arc，但该公司的开发重心最近转移到了 AI 浏览器 Dia，Arc 停止更新，处于维护模式，而 Dia 在 6 月发布了 Beta 版本。AI 搜索引擎初创公司 Perplexity 以及 OpenAI 据报道都曾与 Browser Company 展开过收购谈判。

Google hit with $425 million verdict in privacy class action suit

The Record

9 months 2 weeks ago

A federal jury awarded plaintiffs suing Google $425 million in damages, holding that by collecting the data of users who had switched off an app activity-tracking feature, the tech giant invaded the privacy of millions.

Iran-Nexus Hackers Impersonate Omani MFA to Target Governments Entities

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform

9 months 2 weeks ago

Cybersecurity researchers uncovered a sophisticated, Iran-linked spear-phishing operation that exploited a compromised Ministry of Foreign Affairs (MFA) mailbox in Oman to deliver malicious payloads to government entities worldwide. Analysts attribute the operation to the “Homeland Justice” group, believed to be aligned with Iran’s Ministry of Intelligence and Security (MOIS). Leveraging stolen diplomatic communications, encoded macros, […]

The post Iran-Nexus Hackers Impersonate Omani MFA to Target Governments Entities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Kaaviya

Blast Radius of Salesloft Drift Attacks Remains Uncertain

darkreading

9 months 2 weeks ago

Many high-profile Salesloft Drift customers have disclosed data breaches as a result of a recent supply chain attack, but the extent and severity of this campaign are unclear.

Alexander Culafi

CVE-2024-2240 | Brocade SANnav up to 2.3.1a Docker Daemon unnecessary privileges (WID-SEC-2025-0367)

Vuldb Updates

9 months 2 weeks ago

A vulnerability was found in Brocade SANnav up to 2.3.1a. It has been classified as problematic. Affected is an unknown function of the component Docker Daemon. The manipulation leads to execution with unnecessary privileges. This vulnerability is documented as CVE-2024-2240. The attack can be initiated remotely. There is not any exploit available.

vuldb.com

CVE-2024-4282 | Brocade SANnav up to 2.3.1a SSH risky encryption (WID-SEC-2025-0367)

Vuldb Updates

9 months 2 weeks ago

A vulnerability has been found in Brocade SANnav up to 2.3.1a and classified as problematic. This affects an unknown part of the component SSH. Performing manipulation results in risky cryptographic algorithm. This vulnerability is known as CVE-2024-4282. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

vuldb.com

Tycoon Phishing Kit Employs New Technique to Hide Malicious Links

Cyber Security News

9 months 2 weeks ago

Cybercriminals are deploying increasingly sophisticated methods to bypass security systems, with the latest threat emerging from the advanced Tycoon phishing-as-a-service kit. This malicious platform has introduced novel techniques designed to obscure dangerous links, making them nearly invisible to traditional detection systems while maintaining their effectiveness against unsuspecting victims. The Tycoon phishing kit represents a significant […]

The post Tycoon Phishing Kit Employs New Technique to Hide Malicious Links appeared first on Cyber Security News.

Tushar Subhra Dutta

Москва, осень, эксперимент. ИИ будет решать, достаточно ли вы взрослы для покупки водки

Securitylab.ru

9 months 2 weeks ago

Москва начнёт первой.

美国失业人数超过招聘人数

Solidot

9 months 2 weeks ago

美国四年多以来首次失业人数超过招聘人数。美国 7 月的就业增长数据是如此疲软以至于特朗普总统解雇了负责收集数据的官员，理由是数据被操纵了。本周三公布的数据显示，美国的职位空缺人数四年多以来首次低于求职者人数。Navy Federal Credit Union 的首席经济学家 Heather Long 称这是劳动力市场的转折点。根据美国劳工统计局周三发布的数据，截至 7 月底职位空缺数估计为 718 万。而求职者人数是 720 万。

Ukraine’s cyber chief on Russian hackers’ shifting tactics, US cyber aid

The Record

9 months 2 weeks ago

A former information security professor with more than 25 years in the Ukrainian armed forces, Oleksandr Potii is blunt about Moscow’s capabilities: “We see that Russia’s technical level is high and its potential is strong. We cannot underestimate them."

Pear

Dark Feed IO

9 months 2 weeks ago

You must login to view this content

cohenido

Pear

Dark Feed IO

9 months 2 weeks ago

You must login to view this content

cohenido

New TP-Link zero-day surfaces as CISA warns other flaws are exploited

Bleeping Computer.

9 months 2 weeks ago

TP-Link has confirmed the existence of an unpatched zero-day vulnerability impacting multiple router models, as CISA warns that other router flaws have been exploited in attacks. [...]

Bill Toulas

Вредоносы, VPN и поддельная дипломатия. Раскрыта схема масштабной кибератаки Ирана на государственные структуры мира

Securitylab.ru

9 months 2 weeks ago

Пока дипломаты читали письма, иранские шпионы незаметно взламывали сети.

Aggregator

Managed ad