Aggregator

A vulnerability was found in News Kit Elementor Addons Plugin up to 1.2.1 on WordPress and classified as problematic. This issue affects some unknown processing of the component Canvas Menu Elementor Template. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2024-9541. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as very critical has been found in Oracle Rapid Planning 12.1/12.2. This affects an unknown part of the component Middle Tier. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2016-1000031. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

MSSprinkler MSSprinkler is a password-spraying utility for organizations to test their M365 accounts from an external perspective. It employs a ‘low-and-slow’ approach to avoid locking out accounts and provides verbose information related to accounts...

The post MSSprinkler: A Non-Disruptive Password Spraying Tool for M365 appeared first on Penetration Testing Tools.

IPBan Service IPBan is a simple yet powerful solution for Windows and Linux to prevent botnets and hackers from breaching your computers. Protecting your security is the primary goal, but there are also performance...

The post IPBan: Free security software to block hackers and botnets appeared first on Penetration Testing Tools.

gitleaks – Check git repos for secrets and keys Gitleaks provides a way for you to find unencrypted secrets and other unwanted data types in git source code repositories. As part of its core...

The post gitleaks: Searches full repo history for secrets and keys appeared first on Penetration Testing Tools.

error code: 1106

Welcome to the Security Weekly Podcast Network, your all-in-one so

一位企业IT兼职安全运营员工的烦恼：公司安全设备零散每天处理重复的告警日志耗时耗力专业的运营平台使用门槛高我一时半会又很难上手监管和合规要求越来越严格一旦出差错，就是全网通报我们公司规模小，安全预算有

A vulnerability classified as problematic has been found in Digium Asterisk. Affected is an unknown function of the file vmail.cgi. The manipulation of the argument folder leads to path traversal. This vulnerability is traded as CVE-2005-3559. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

什么是RAG检索增强生成（Retrieval Augmented Generation, RAG）是一种技术，它通过从数据源中检索信息来辅助大语言模型（Large Language Model, LL

Change Healthcare data breach impacted over 100 million peopleT

A vulnerability was found in Linux Kernel up to 6.11.3 and classified as critical. This issue affects the function ice_dpll_init_rclk_pins. The manipulation leads to improper update of reference count. The identification of this vulnerability is CVE-2024-50021. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.11.3. It has been classified as critical. Affected is the function ice_sriov_set_msix_vec_count. The manipulation leads to improper update of reference count. This vulnerability is traded as CVE-2024-50020. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.56/6.11.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component net. The manipulation leads to denial of service. This vulnerability is known as CVE-2024-50023. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.112/6.6.56/6.11.3. This issue affects the function dax_set_mapping. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2024-50022. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.11.3 and classified as problematic. Affected by this vulnerability is the function fnic_fnic_flush_tx of the file /kernel/workqueue.c. The manipulation leads to improper initialization. This vulnerability is known as CVE-2024-50025. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.1.112/6.6.56/6.11.3. It has been declared as problematic. This vulnerability affects the function wd33c93_intr. The manipulation of the argument scsi_pointer leads to improper initialization. This vulnerability was named CVE-2024-50026. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.0.11. Affected is the function can327_feed_frame_to_netdev. The manipulation leads to allocation of resources. This vulnerability is traded as CVE-2022-49008. The attack can only be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 5.10.226/5.15.167/6.1.112/6.6.56/6.11.3. This affects an unknown part. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2024-50024. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Linux Kernel up to 6.11.3. This vulnerability affects the function thermal_zone_device_unregister. The manipulation leads to use after free. This vulnerability was named CVE-2024-50027. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.