Aggregator

A vulnerability was found in Samsung Devices. It has been rated as critical. This issue affects some unknown processing in the library librtppayload.so of the component h.264 Format Parser. The manipulation leads to out-of-bounds write. The identification of this vulnerability is CVE-2024-34665. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Samsung Devices. Affected by this issue is some unknown functionality in the library librtppayload.so of the component h.265 Format Parser. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2024-34667. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Immuta announced an expansion of its platform with the launch of a new Data Marketplace solution to power fast and safe internal data sharing. Fueling a data marketplace that is owned and managed by the customer, the Immuta Platform enables rapid, data-driven decisions by bringing together data teams and data users to automate discovery and access, while still providing enterprise-grade governance and security. Organizations have larger data volumes and more data consumers than ever before, … More →

The post Immuta Data Marketplace automates data access workflows appeared first on Help Net Security.

Authors/Presenters:Punkcoder

Our sincere appreciation to DEF CON, and the Presenters/Authors for publishing their timely DEF CON 32 erudite content. Originating from the conference’s events located at the Las Vegas Convention Center; and via the organizations YouTube channel.

Permalink

The post DEF CON 32 – AppSec Village – Navigating The Cyber Security Labyrinth Choose Your Own Security Adventure appeared first on Security Boulevard.

云储存服务公司 Dropbox 宣布裁员五分之一。CEO Drew Houston 在致函员工的信中表示，裁员将影响 528 人，主要涉及“过度投资”的领域，公司同时将设计一个更扁平更高效的团队结构。他表示作为 CEO 承担所有责任，并向所有受影响的人致歉。受影响的员工将会获得遣散费、股权和过渡费，以及医保和福利以及就业安置服务。根据提交给 SEC 的文件，Dropbox 估计裁员将花费 6300 万到 6800 万美元。过去几个月，Dropbox 增长极度缓慢，市场份额被 Box 和 Google Drive 等竞争对手夺走，上一个财季仅增加了 63,000 名新用户，而总用户数是 1800 万。

A new version of the FakeCall malware for Android hijacks outgoing calls from a user to their bank, redirecting them to the attacker's phone number instead. [...]

谈谈 NotebookLM 等 AI 播客产品、播客破圈、与时代的「心灵避难所」。

A vulnerability was found in Apple iOS up to 10.2. It has been classified as critical. Affected is an unknown function of the component Kernel. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2017-2473. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in MariaDB up to 10.6. Affected is the function xbstream_open of the file extra/mariabackup/ds_xbstream.cc. The manipulation leads to denial of service. This vulnerability is traded as CVE-2022-31621. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Google Go on Windows and classified as critical. This vulnerability affects the function syscall.StartProcess of the file os/exec.Cmd of the component Environment Variable Handler. The manipulation leads to improper neutralization of null byte or nul character. This vulnerability was named CVE-2022-41716. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Vocera Report Server and Voice Server up to 5.8. It has been classified as critical. Affected is an unknown function of the component Unzip Handler. The manipulation leads to path traversal. This vulnerability is traded as CVE-2022-46902. The attack needs to be approached within the local network. There is no exploit available.

A vulnerability was found in Cpanel::JSON::XS up to 4.32 on Perl and classified as problematic. This issue affects some unknown processing. The manipulation leads to denial of service. The identification of this vulnerability is CVE-2022-48623. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Livebox Collaboration vDesk up to 031. It has been classified as problematic. This affects an unknown part of the file /api/v1/notification/createnotification of the component Push Notification Handler. The manipulation leads to open redirect. This vulnerability is uniquely identified as CVE-2022-45169. The attack can only be done within the local network. There is no exploit available.

A vulnerability was found in Hitachi Energy FOXMAN-UN and UNEM. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to incorrect user management. This vulnerability is handled as CVE-2024-28020. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Hitachi Energy FOXMAN-UN and UNEM. This affects an unknown part. The manipulation leads to improper restriction of excessive authentication attempts. This vulnerability is uniquely identified as CVE-2024-28022. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in 10Web Form Maker Plugin up to 1.15.25 on WordPress. It has been rated as problematic. This issue affects some unknown processing of the component Setting Handler. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-6130. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.