Aggregator

国内一家某知名科技公司因内部文件不慎外泄，导致一部分客户资料曝光于公众视野，而公司却无法根据泄露的文件追溯到始作俑者。

新闻速览 •《汽车整车信息安全技术要求》等3项智能网联汽车强制性国家标准发布 •世界互联网大会召开推动构建网络 […]

A vulnerability classified as critical was found in CentOS-WebPanel.com CentOS Web Panel 6/7. This vulnerability affects unknown code of the file /cwp_{SESSION_HASH}/admin/loader_ajax.php. The manipulation of the argument term as part of Parameter leads to sql injection. This vulnerability was named CVE-2020-10230. The attack can be initiated remotely. Furthermore, there is an exploit available.

brutespray Brutespray has been updated to golang. Without needing to rely on other tools this version will be extensible to bruteforce many different services and is way faster than its Python counterpart. Currently, Brutespray...

The post brutespray: Automatically attempts default creds on found services appeared first on Penetration Testing Tools.

JPCERT/CC held the annual ICS Security Conference 2024 on 7 February 2024. The conference aims to share the current status of threats to ICS both in Japan and overseas and the efforts of stakeholders in the field, as well as...

BunkerWeb BunkerWeb is a next-generation and open-source Web Application Firewall (WAF). Being a full-featured web server (based on NGINX under the hood), it will protect your web services to make them “secure by default”. BunkerWeb integrates...

The post BunkerWeb: Open-source and next-generation Web Application Firewall (WAF) appeared first on Penetration Testing Tools.

opensquat openSquat is an opensource Intelligence (OSINT) R&D project to identify cybersquatting threats to specific companies or domains, such as: Domain squatting Typosquatting IDN homograph attacks Phishing Scams It does support some key features such as:...

The post opensquat: opensource Intelligence R&D project to identify cyber squatting threats appeared first on Penetration Testing Tools.

A vulnerability, which was classified as critical, was found in tsdisplay4xoops 0.1. This affects an unknown part of the file blocks/tsdisplay4xoops_block2.php. The manipulation of the argument xoops_url leads to code injection. This vulnerability is uniquely identified as CVE-2007-2091. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

随着信息技术的飞速发展，数据安全问题日益凸显，商用密码技术作为保护数据安全的重要手段，其应用和推广受到了广泛关 […]

该漏洞披露后仅几个小时，威胁者就开始大规模攻击网站，Wordfence 报告称阻止了近 5万次攻击。

A vulnerability was found in StoreFront Gallery. It has been classified as critical. This affects an unknown part of the file mods/business_functions.php. The manipulation of the argument GALLERY_BASEDIR leads to file inclusion. This vulnerability is uniquely identified as CVE-2007-2068. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in libiitech Pet Salon 1.0.1. It has been classified as critical. Affected is an unknown function of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is traded as CVE-2014-5907. The attack can only be done within the local network. There is no exploit available.

Colombia’s President Gustavo Petro said Wednesday that his administration is probing the disappeara

error code: 1106

A vulnerability classified as critical has been found in Sunshop Shopping Cart. This affects an unknown part of the file checkout.php. The manipulation of the argument abs_path leads to code injection. This vulnerability is uniquely identified as CVE-2007-2070. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

英特尔正考虑出售 Mobileye 部分股权；支付宝推出 AI 独立 App「支小宝」；索尼可能在庆祝 30 周年时确认 PS5 Pro 的存在

A vulnerability classified as critical was found in Apple macOS up to 10.13.1. Affected by this vulnerability is an unknown functionality of the component Open Scripting Architecture. The manipulation leads to memory corruption. This vulnerability is known as CVE-2017-13824. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Youngmoney Lil Wayne Slots: FREE SLOTS 1.138 and classified as critical. This issue affects some unknown processing of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. The identification of this vulnerability is CVE-2014-5906. The attack needs to be approached within the local network. There is no exploit available.

A vulnerability was found in Turnkey Web Tools SunShop Shopping Cart up to 3.5.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument abs_path leads to code injection. The identification of this vulnerability is CVE-2007-2070. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.