Aggregator

CVE-2007-3487 | HP Photo Digital Imaging Activex Control 2.0.0.133 ActiveX Control hpqxml.dll path traversal (EDB-4119 / XFDB-35124)

Vuldb Updates
1 year 5 months ago
A vulnerability was found in HP Photo Digital Imaging Activex Control 2.0.0.133. It has been classified as critical. This affects an unknown part in the library hpqxml.dll of the component ActiveX Control. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2007-3487. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com

雷神众测漏洞周报2024.09.18-2024.09.22

雷神众测
1 year 5 months ago
雷神众测拥有该文章的修改和解释权。如欲转载或传播此文章，必须保证此文章的副本，包括版权声明等全部内容。声明雷神众测允许，不得任意修改或增减此文章内容，不得以任何方式将其用于商业目的。

HITCON CTF & corCTF & sekaiCTF 2024 筆記

Huli's blog
1 year 5 months ago

久違的筆記，想寫很久了但一直拖延，像是 CTF 這種東西的 writeup 其實速度滿重要的，因為賽後討論大部分都在 Discord 裡面發生，時間久了訊息比較難找，而且很有可能忘記，要趕快寫成 writeup 才能把那些實用的資訊記錄下來。

這篇一次帶來三個 CTF 的 writeup，有些我沒有打，只是純粹看著別人的筆記重新記一遍而已。

關鍵字列表：

  1. bfcache
  2. response splitting
  3. Service-Worker-Allowed
  4. gunicorn script_name
  5. socket.io disconnect
  6. socket.io JSONP CSP bypass
  7. performance API
  8. streaming HTML parsing
  9. content-type ISO-2022-JP
Huli

CVE-2024-8903 | Acronis Cyber Protect Cloud Agent 36943/37758/38235 on Windows/macOS Setting unnecessary privileges

VulDB Recent Entries
1 year 5 months ago
A vulnerability classified as problematic was found in Acronis Cyber Protect Cloud Agent 36943/37758/38235 on Windows/macOS. Affected by this vulnerability is an unknown functionality of the component Setting Handler. The manipulation leads to execution with unnecessary privileges. This vulnerability is known as CVE-2024-8903. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad