Aggregator

Submit #482371 / VDB-293480

A vulnerability has been found in Bfs.kilu Bigforum 4.5 and classified as critical. This vulnerability affects unknown code of the file profil.php. The manipulation of the argument id leads to sql injection. This vulnerability was named CVE-2010-0948. The attack can be initiated remotely. Furthermore, there is an exploit available.

登录 注册

在上月底举行的 38C3 混沌计算机俱乐部会议上，研究人员披露中欧地区的可更新能源设施使用未加密无线电信号接收命令向电网输送或切断电力。研究人员是在分析柏林路灯使用的无线电接收器时意外获得这一发现的，他们试图通过逆向工程无线电接收器去控制柏林全市的路灯去展示能从空中看到的特定模式，结果意外发现控制可更新能源设施的系统与控制路灯的系统相同。安装在路灯上的接收器也用于小型太阳能发电厂这一事实并不令他们感到惊讶，他们感到震惊的是其规模。研究人员估计，在特定条件下向发电设施发送一系列恶意信息足以摧毁整个欧洲电网。电网安全专家对此说法持怀疑态度。

A vulnerability was found in IBM Automation Decision Services 23.0.2 and classified as problematic. This issue affects some unknown processing. The manipulation leads to use of web browser cache containing sensitive information. The identification of this vulnerability is CVE-2024-31906. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in ays-pro Survey Maker Plugin up to 5.1.3.3 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation of the argument ays_sections[5][questions][8][title] leads to cross site scripting. This vulnerability was named CVE-2024-13505. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in codexpert WC Affiliate Plugin up to 2.4 on WordPress. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-12334. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in e4jvikwp VikBooking Hotel Booking Engine & PMS Plugin up to 1.7.2 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2024-11641. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as critical was found in MVPThemes Zox News Plugin up to 3.16.0 on WordPress. Affected by this vulnerability is the function backup_options/restore_options. The manipulation leads to missing authorization. This vulnerability is known as CVE-2024-11936. The attack can be launched remotely. There is no exploit available.

INE Security, a leading global provider of cybersecurity training and certifications, today announced a new initiative designed to accelerate compliance with the Department of Defense’s (DoD) newly streamlined Cybersecurity Maturity Model Certification (CMMC) 2.0. This initiative aims to assist Defense Industry Base (DIB) contractors in swiftly adapting to the updated certification standards, which are critical […]

The post INE Security Alert: Expediting CMMC 2.0 Compliance appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A vulnerability was found in xlreader 0.9. It has been declared as very critical. Affected by this vulnerability is the function book_format_sql of the file format.c. The manipulation leads to memory corruption. This vulnerability is known as CVE-2004-1301. The attack can be launched remotely. Furthermore, there is an exploit available.

Ransomware actors targeting ESXi bare metal hypervisors are leveraging SSH tunneling to persist on the system while remaining undetected. [...]

A vulnerability was found in Novius OS Elche 5.0.1 and classified as critical. This issue affects some unknown processing of the file admin/nos/login. The manipulation of the argument redirect leads to open redirect. The identification of this vulnerability is CVE-2015-5354. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in Ca3de March 2004. This affects an unknown part. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2005-0671. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Bfcommand And Control Software BFCC 1.22 A. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to denial of service. This vulnerability is handled as CVE-2005-2791. The attack may be launched remotely. Furthermore, there is an exploit available.