Aggregator

The BianLian ransomware group has shifted exclusively to exfiltration-based extortion and is deploying multiple new TTPs for initial access and persistence

EmbedPayloadInPng是一款功能强大的Payload嵌入工具，该工具能够将Payload拆分为多个IDAT部分，并将Payload数据嵌入到PNG图片文件中。

Operational Technology (OT) and Industrial Control Systems (ICS) are critical components of many industries, especially those within the 16 critical […]

The post Building and Enhancing OT/ICS Security Programs Through Governance, Risk, and Compliance (GRC) appeared first on Security Boulevard.

A vulnerability classified as problematic was found in Symantec Enterprise Firewall and VPN Appliances up to 1.62. This vulnerability affects unknown code of the component Configuration File. The manipulation leads to an unknown weakness. This vulnerability was named CVE-2004-1474. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

A vulnerability has been found in Macromedia JRun 3.0/3.1/4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Management Console. The manipulation leads to basic cross site scripting. This vulnerability is known as CVE-2004-1477. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Hitachi Cosminexus Enterprise 4.0 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2004-1478. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Symantec Enterprise Firewall 320/360/360r. This affects an unknown part. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2004-1472. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Symantec Enterprise Firewall and VPN Appliances up to 1.62. This affects an unknown part. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2004-1473. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

A vulnerability, which was classified as critical, has been found in Vlad Alexa Mancini PHPFootball 1.5/1.6. Affected by this issue is some unknown functionality of the file filter.php. The manipulation of the argument dbfield leads to information disclosure. This vulnerability is handled as CVE-2009-0711. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in CMScout 2.06. This vulnerability affects unknown code of the file admin.php. The manipulation of the argument bit leads to path traversal. This vulnerability was named CVE-2008-6726. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Audacity up to 1.3.6. It has been classified as very critical. Affected is the function String_parse::get_nonspace_quoted of the file lib-src/allegro/strparse.cpp. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2009-0490. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Jayeshp Pixel8 Web Photo Album 3.0. It has been declared as critical. This vulnerability affects unknown code of the file Photo.asp. The manipulation of the argument AlbumID leads to sql injection. This vulnerability was named CVE-2008-6153. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in ASPThai.Net Webboard 6.0. Affected is an unknown function of the file bview.asp. The manipulation of the argument id leads to sql injection. This vulnerability is traded as CVE-2009-0703. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in CMScout 2.06. This affects an unknown part of the file index.php. The manipulation of the argument id leads to sql injection. This vulnerability is uniquely identified as CVE-2008-6725. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Megacubo 5.0.7. It has been classified as very critical. This affects an unknown part. The manipulation leads to code injection. This vulnerability is uniquely identified as CVE-2008-6748. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in China-on-site FlexPHPic 0.0.3/0.0.4 and classified as critical. This issue affects some unknown processing of the component UserCheck. The manipulation of the argument checkpass leads to sql injection. The identification of this vulnerability is CVE-2008-6142. The attack may be initiated remotely. Furthermore, there is an exploit available.

Система видеоконференций получила срочное обновление ПО.

A vulnerability classified as critical has been found in FlexCustomer 0.0.1/0.0.4. This affects an unknown part of the file index.php. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2006-2268. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to add further authentication.