Aggregator

微信：从一开始就没有「已读」功能，以后也不会有；蔚来高管称理想受难有人祸水东引；全球首家具身智能机器人 4S 店、北京首家机器人主题餐厅 8 月 8 日开业

A vulnerability was found in µD3TN up to 0.14.0. It has been declared as critical. This vulnerability affects unknown code of the component BPv7 Parser. The manipulation leads to reachable assertion. This vulnerability was named CVE-2024-10455. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Unified Communications Manager IM and Presence Service. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2024-20457. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Unified Communications Manager. It has been declared as problematic. This vulnerability affects unknown code of the component Web-based Management Interface. The manipulation leads to cross site scripting. This vulnerability was named CVE-2024-20511. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Cisco Unified Contact Center Management Portal. Affected is an unknown function of the component Web-based Management Interface. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-20540. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Cisco Firepower Management Center. This affects an unknown part of the component Administrative Web-based GUI Configuration Manager. The manipulation leads to cleartext storage of sensitive information in gui. This vulnerability is uniquely identified as CVE-2021-34751. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Firepower Threat Defense Software. It has been rated as critical. Affected by this issue is some unknown functionality of the component Ethernet Industrial Protocol. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2021-34753. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Kofax Power PDF. This vulnerability affects unknown code of the component JP2 File Parser. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2024-5512. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic has been found in Kofax Power PDF. Affected is an unknown function of the component JP2 File Parser. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-5511. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic was found in Kofax Power PDF. Affected by this vulnerability is an unknown functionality of the component JP2 File Parser. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2024-5510. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Kofax Power PDF. It has been rated as critical. This issue affects some unknown processing of the component JP2 File Parser. The manipulation leads to out-of-bounds write. The identification of this vulnerability is CVE-2024-5513. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in OpenAFS PAG up to 1.6.24/1.8.12.2/1.9.1 and classified as critical. This issue affects some unknown processing. The manipulation leads to integer overflow. The identification of this vulnerability is CVE-2024-10394. An attack has to be approached locally. There is no exploit available.

A vulnerability classified as critical has been found in HashiCorp Vault and Vault Enterprise up to 1.18.0. Affected is an unknown function of the component API Endpoint. The manipulation leads to not failing securely. This vulnerability is traded as CVE-2024-8185. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Secure Email, Secure Email and Web Manager and Secure Web Appliance. It has been declared as problematic. This vulnerability affects unknown code of the component Web-based Management Interface. The manipulation leads to basic cross site scripting. This vulnerability was named CVE-2024-20504. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

The Kimsuky group has once again found itself at the center of attention following a campaign that deftly combined social engineering tactics with sophisticated techniques for bypassing Windows security mechanisms. Their targets included South...

The post Sophisticated Kimsuky Campaign: New Malware Bypasses Windows Defender appeared first on Penetration Testing Tools.

2025 Let's GoSSIP 暑期学校日程已定，快来报名！

作者致力于深入学习黑客技术，从编程与网络基础到高级渗透测试与数字隐匿，结合AI与安全哲学构建自研框架。寻求资源建议与合作机会以实现目标。

智慧农业要快跑，数据安全先筑牢！

当前环境异常，需完成验证后方可继续访问。

本文是一份周刊类文章，记录每周值得分享的科技内容，并于每周五发布。内容涵盖科技新闻、工具资源、AI动态及观点分享等。其中包括Dan Wang的新书《冲：中国对未来的探索》，对比中美两国在工程与法律社会模式上的差异；冷冻胚胎诞生时间最久世界纪录；南非为犀牛角植入放射性物质防止偷猎；开源工具如Tinyauth、Hyprnote等；以及关于AI验证不对称性及编程教育的观点讨论。