Aggregator

A vulnerability, which was classified as problematic, was found in Code4Berry Decoration Management System 1.0. This affects an unknown part of the file /decoration/admin/user_permission.php of the component User Permission Handler. The manipulation leads to permission issues. This vulnerability is uniquely identified as CVE-2024-11486. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as critical, has been found in Code4Berry Decoration Management System 1.0. Affected by this issue is some unknown functionality of the file /decoration/admin/userregister.php of the component User Handler. The manipulation leads to permission issues. This vulnerability is handled as CVE-2024-11485. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical was found in Code4Berry Decoration Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /decoration/admin/update_image.php of the component User Image Handler. The manipulation of the argument productimage1 leads to improper access controls. This vulnerability is known as CVE-2024-11484. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #441917 / VDB-285502

Submit #441916 / VDB-285501

Submit #441914 / VDB-285500

Submit #441913 / VDB-285499

A vulnerability classified as problematic has been found in Rakuten Mobile Rakuten Turbo 5G up to 1.3.18. Affected is an unknown function. The manipulation leads to exposure of sensitive system information to an unauthorized control sphere. This vulnerability is traded as CVE-2024-52033. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Rakuten Mobile Rakuten Turbo 5G up to 1.3.18. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2024-48895. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Rakuten Mobile Rakuten Turbo 5G up to 1.3.18. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to missing authentication. This vulnerability was named CVE-2024-47865. The attack can be initiated remotely. There is no exploit available.

世界互联网大会｜美创数据认知与分类分级系统（AICogniSort）重磅发布！

法国和德国也有外包网络安全的倾向，但程度较轻。

Recent backdoor implants and cyber-espionage attacks on their supply chains have African organizations looking to diversify beyond Chinese, American tech vendors.

你可能错过的新鲜事Google Play 2024 年度最佳榜单公布11 月 18 日，Google Play 2024 年度最佳榜单正式公布，榜单涵盖应用、游戏和图书三大类别，其中年度最佳应用为

微软旗下的热门沙盒游戏《我的世界（Minecraft）》与欧洲最大主题公园运营商 Merlin Entertainments 签署协议，将率先在英国和美国开设主题游乐设施、景点、酒店客房和零售点。Merlin 的规模仅次于迪士尼，在 23 个国家运营逾 135 个景点，包括奥尔顿塔、乐高乐园、海洋生物公园、杜莎夫人蜡像馆和伦敦眼。前两个景点 Merlin 将投资逾 1.1 亿美元，将于 2026 年和 2027 年分别在英国和美国开业，景点要么位于现有主题公园内，要么作为新的市中心景点。两家公司未来计划扩大到其他国家和地区。《我的世界》是史上最畅销游戏之一，每月有 1.4 亿玩家。

Неочевидная лазейка пугает своей простотой.

苹果最新的移动操作系统iOS 18似乎增加了一项未经记录的安全功能，如果设备在72小时内未使用，则会重新启动设备。这对任何试图在没有有效密码的情况下使用iOS设备的人都会产生影响，比如手机被盗或者被扣押。无有效密码访问数据难度叠加当iPhone 重新启动时，它会进入一个称为“首次解锁前”（ BFU ）的状态，在此期间，它所包含的文件将被加密。一旦使用密码解锁，它的状态将变为首次解锁后（AFU）。此

Threat actors exploit misconfigured JupyterLab and Jupyter Notebooks servers to rip sports streams and illegally redistribute them. Researchers from security firm Aqua observed threat actors exploiting misconfigured JupyterLab and Jupyter Notebook servers to hijack environments, deploy streaming tools, and duplicate live sports broadcasts on illegal platforms. “threat actors using misconfigured servers to hijack environments for […]

A vulnerability was found in PyMOL 2.5.0. It has been declared as critical. This vulnerability affects unknown code of the component PYM File Handler. The manipulation leads to improper authorization. This vulnerability was named CVE-2024-50636. The attack can be initiated remotely. There is no exploit available.