Aggregator

1. Embargo勒索团伙公布新的受害公司 2. Abyss勒索团伙公布新的受害公司 3. Funksec勒索团伙公布入侵埃及政府服务总局

2025.1.4 – 2025.1.10每周勒索事件相关情报1. Embargo勒索团伙公布新的受害公司2. Abyss勒索团伙公布新的受害公司3. Funksec勒索团伙公布入侵埃及政府服务总局每周

1. Embargo勒索团伙公布新的受害公司 2. Abyss勒索团伙公布新的受害公司 3. Funksec勒索团伙公布入侵埃及政府服务总局

1. IntroductionNowadays, we can rely on different streaming systems to transmit and collect our dat

HackerNews 编译，转载请注明出处： 威胁情报公司GreyNoise警告称，威胁行为者正在利用最近披露的GFI KerioControl防火墙漏洞，该漏洞可导致一键远程代码执行（RCE）。 GFI KerioControl是一款网络安全解决方案，提供防火墙功能和统一威胁管理能力，包括威胁检测和阻止、流量控制、入侵防御以及VPN功能。 被利用的漏洞编号为CVE-2024-52875，于12月19日发布了补丁，是一个CRLF注入漏洞，可被利用执行HTTP响应拆分攻击，进而导致反射型跨站脚本（XSS）攻击。 安全研究员埃吉迪奥·罗马诺于12月16日发布了该漏洞的详细技术文档，指出反射型XSS攻击向量可被利用执行一键RCE攻击。 罗马诺解释说，该问题源于GFI KerioControl中的多个HTTP响应拆分漏洞，这些漏洞之所以存在，是因为易受攻击的页面未能正确清理用户输入。 研究员评估认为，由于利用该漏洞获得RCE时可利用一个九年前就已存在的漏洞，且可能使攻击者在防火墙上部署root shell，因此该漏洞应被视为“高危”，CVSS评分为8.8。 罗马诺发布了针对该安全缺陷的概念验证（PoC）代码，并警告称，该漏洞影响GFI KerioControl 9.2.5至9.4.5版本，意味着该漏洞在软件中潜伏了大约七年。 本周，GreyNoise警告称，已观察到多次针对CVE-2024-52875的利用尝试，该漏洞“允许攻击者利用HTTP响应拆分和反射型跨站脚本获取设备的CSRF令牌，在特定条件下可能实现一键远程代码执行”。   消息来源：Security Week, 编译：zhongx；  本文由 HackerNews.cc 翻译整理，封面来源于网络；   转载请注明“转自 HackerNews.cc”并附上原文

error code: 521

Hawkeye(鹰眼)一款基于goalang开发的安全工具，旨在帮助安全工程师上机排查时能够快速的定位问题，提供排查思路。

Hawkeye(鹰眼)一款基于goalang开发的安全工具，旨在帮助安全工程师上机排查时能够快速的定位问题，提供排查思路。

Hawkeye(鹰眼)一款基于goalang开发的安全工具，旨在帮助安全工程师上机排查时能够快速的定位问题，提供排查思路。

Hawkeye(鹰眼)一款基于goalang开发的安全工具，旨在帮助安全工程师上机排查时能够快速的定位问题，提供排查思路。

1. IntroductionAccording to Ultraboard Games, the mancala game has existed for about 7000 years. Th

主站 分类 漏洞 工具 极客

CrowdStrike近日发出一则提醒，称一个网络钓鱼活动冒充自己发布虚假招聘，以借此向受害者传播门罗币加密货币矿工 （XMRig） 。

主站 分类 漏洞 工具 极客

网络安全研究人员发现了一种针对 macOS 的新型信息窃取恶意软件变种，隐蔽性更强，名为Banshee Stealer。

A vulnerability was found in Jeg Elementor Kit Plugin up to 2.6.9 on WordPress. It has been rated as problematic. This issue affects the function sg_content_template. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2024-8899. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Wearables and classified as very critical. Affected by this issue is some unknown functionality of the component Touch Pal Application. The manipulation leads to configuration. This vulnerability is handled as CVE-2018-11922. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Qualcomm Snapdragon Wired Infrastructure and Networking. It has been classified as critical. This affects an unknown part. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2018-11952. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Qualcomm Snapdragon Mobile up to SD 850 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2017-18306. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Qualcomm Snapdragon Mobile up to SD 850. It has been classified as problematic. This affects an unknown part of the component Audio Playback. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2017-18307. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to upgrade the affected component.