Aggregator

HackerNews 编译，转载请注明出处： 本周，美国司法部（DoJ）公布了对巴西库里奇巴29岁公民Junior Barros De Oliveira的起诉书。De Oliveira涉嫌通过黑客攻击威胁勒索，已被起诉四项与从受保护计算机获取信息相关的勒索威胁罪名，以及四项威胁通讯罪名。 案件受害者是一家新泽西州公司在巴西的子公司，其计算机系统于2020年3月遭到De Oliveira的入侵。他利用获取的访问权限，至少三次窃取约30万名客户的机密信息。 2020年9月，De Oliveira通过假名向该公司首席执行官发送电子邮件，要求支付300比特币（约320万美元），否则将泄漏公司数据。一个月后，他又将同一邮件转发给首席执行官及巴西子公司高管。 在后续邮件中，De Oliveira表示愿“协助解决安全漏洞”，但要求75比特币（约80万美元）作为咨询费，并提供了支付到比特币钱包的详细指南。 若罪名成立，每项勒索威胁罪名最高可判5年监禁，并处25万美元或非法获利/损失两倍的罚款（以较高者为准）；每项威胁通讯罪名最高可判2年监禁，并处相同额度的罚款。   消息来源：The Hacker News, 编译：zhongx；  本文由 HackerNews.cc 翻译整理，封面来源于网络；   转载请注明“转自 HackerNews.cc”并附上原文

error code: 521

A vulnerability classified as problematic has been found in Apache Rave up to 0.20. This affects an unknown part of the component User Account. The manipulation of the argument offset leads to information disclosure. This vulnerability is uniquely identified as CVE-2013-1814. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in Microsoft FrontPage Server Extensions 2002. This issue affects some unknown processing. The manipulation leads to basic cross site scripting. The identification of this vulnerability is CVE-2006-0015. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Remote Clinic 2.0. It has been rated as problematic. This issue affects some unknown processing of the file clinics/register.php. The manipulation of the argument Clinic Name/Clinic Address/Clinic City/Clinic Contact leads to cross site scripting. The identification of this vulnerability is CVE-2021-30042. The attack may be initiated remotely. Furthermore, there is an exploit available.

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

APT组织Lazarus 在Rootkit（获取内核权限）攻击中使用了微软的0day漏洞;APT组织Kimsuky利用软件公司产品安装程序进行伪装展开攻击;NoName057(16)组织DDoSia项目持续更新;

比特币价格下跌；智谱清言引入新负责人；宁德时代宣布赴香港上市

比特币下跌 巨额衍生品到期或带来动荡纽约时间 07：12，比特币下跌约 3% 至 95,420 美元。一个包含以太币、Solana 和狗狗币等较小加密货币的更广泛加密货币指标下跌约 3%。目前稳定在

A vulnerability was found in Oracle Java up to 2.2.7. It has been rated as critical. This issue affects some unknown processing of the component Install. The manipulation leads to Local Privilege Escalation. The identification of this vulnerability is CVE-2013-2439. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Oracle Java up to 7 Update 17 and classified as problematic. This issue affects some unknown processing of the component JavaFX. The manipulation leads to an unknown weakness. The identification of this vulnerability is CVE-2013-2438. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in CA ARCserve Backup up to r16. It has been rated as critical. This issue affects some unknown processing of the component RPC requests parser. The manipulation leads to improper input validation. The identification of this vulnerability is CVE-2012-2972. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in HP Router and Switch. It has been rated as problematic. Affected by this issue is some unknown functionality of the component SNMP. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2012-3268. The attack may be launched remotely. Furthermore, there is an exploit available. This vulnerability has a historic impact due to its background and reception. It is recommended to upgrade the affected component.

A vulnerability has been found in Apple Mac OS X 10.3.7 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is known as CVE-2005-0125. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Apache Tomcat 5.x. Affected by this vulnerability is the function getLocale of the component JVM. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2011-0013. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in ZyXEL ZyWALL 10 up to 3.49. It has been rated as problematic. Affected by this issue is some unknown functionality of the component ARP Packet Handler. The manipulation leads to denial of service. This vulnerability is handled as CVE-2002-0438. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in IBM Lotus Domino R5 up to r5.0.7a. It has been rated as critical. This issue affects some unknown processing of the component LDAP. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2001-1313. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

A vulnerability, which was classified as problematic, has been found in Microsoft Windows 2000 SP2. Affected by this issue is some unknown functionality of the component SNMP LAN Manager. The manipulation as part of GET/GETNEXT Request leads to memory leak. This vulnerability is handled as CVE-2001-1451. The attack may be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic was found in Microsoft Windows XP. This vulnerability affects unknown code of the file CONVERT.EXE of the component File System. The manipulation leads to improper privilege management. This vulnerability was named CVE-2002-0034. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in IBM Lotus Domino R5 up to r5.0.7a. It has been declared as critical. This vulnerability affects unknown code of the component LDAP. The manipulation leads to format string. This vulnerability was named CVE-2001-1312. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.