Aggregator

CVE-2024-50208 | Linux Kernel up to 5.15.169/6.1.114/6.6.58/6.11.5 bnxt_re memory corruption

Vuldb Updates
1 week 3 days ago
A vulnerability was found in Linux Kernel up to 5.15.169/6.1.114/6.6.58/6.11.5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component bnxt_re. The manipulation leads to memory corruption. This vulnerability is known as CVE-2024-50208. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-50204 | Linux Kernel up to 6.11.5 fs free_mnt_ns Privilege Escalation (a8b155a2c30d/229fd15908fe)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in Linux Kernel up to 6.11.5. It has been rated as problematic. Affected by this issue is the function free_mnt_ns of the component fs. The manipulation leads to Privilege Escalation. This vulnerability is handled as CVE-2024-50204. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-50201 | Linux Kernel up to 5.10.227/5.15.168/6.1.113/6.6.57/6.11.4 radeon initialization

Vuldb Updates
1 week 3 days ago
A vulnerability was found in Linux Kernel up to 5.10.227/5.15.168/6.1.113/6.6.57/6.11.4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component radeon. The manipulation leads to improper initialization. This vulnerability is handled as CVE-2024-50201. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-50202 | Linux Kernel up to 5.10.227/5.15.168/6.1.113/6.6.57/6.11.4 nilfs_find_entry exceptional condition

Vuldb Updates
1 week 3 days ago
A vulnerability classified as problematic has been found in Linux Kernel up to 5.10.227/5.15.168/6.1.113/6.6.57/6.11.4. This affects the function nilfs_find_entry. The manipulation leads to handling of exceptional conditions. This vulnerability is uniquely identified as CVE-2024-50202. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-6613 | Mozilla Firefox up to 127.x iFrame Iterator infinite loop (Nessus ID 208022)

Vuldb Updates
1 week 3 days ago
A vulnerability, which was classified as problematic, was found in Mozilla Firefox up to 127.x. This affects an unknown part of the component iFrame Iterator. The manipulation leads to infinite loop. This vulnerability is uniquely identified as CVE-2024-6613. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

世界互联网大会｜美创数据认知与分类分级系统（AICogniSort）重磅发布

嘶吼
1 week 3 days ago

11月19日至22日，2024年世界互联网大会乌镇峰会在浙江乌镇盛大召开，浙江省网络空间安全协会连续第三年成功举办“网络空间安全治理”主题的新产品新技术发布活动。美创科技携新产品-数据认知与分类分级系统（AICogniSort）惊艳亮相，成为现场焦点。

当今，数据被视为新型生产力，国家层面的《数据安全法》与《个人信息保护法》等法律法规均强调了数据安全分类分级的重要性。金融、政务以及工业等领域的监管机构也相继发布了各自行业的数据分类分级指南或指导意见，旨在推动这些措施的有效实施。然而在企事业单位实际落地数据分类分级过程中，仍面临着诸如行业数据辨识困难、分类标准不易掌握、实施周期较长及成本较高等挑战，这导致高质量的数据分类分级成果的实现仍具有一定的门槛。

“AI+数据安全分类分级”为上述问题提供有效解决方法。美创科技数据认知与分类分级系统（AICogniSort）是一款致力于通过AI智能化技术，安全、高效、准确发现并识别国家、个人和组织安全所必须的各类分级数据的产品，通过精准打标，形成符合行业诉求的资产目录，满足安全合规、以及数据流动的安全防护需求。

核心功能之元数据梳理

传统的元数据梳理流程是数据源的添加、扫描、采集、语义识别。通过引入大模型，美创数据认知与分类分级系统（AICogniSort）在元数据梳理上做到了三个增强：

一 增强支持非结构化数据的分类分级：大模型基于自然语言理解能力，有非常好的上下文、切词、分词能力，可识别出区中的文本，判断数据的标签。

二 增强数据关系的梳理能力：对海量表、字段、样本数据进行摸底梳理后，大模型可以更好的关联到字段之间的关系，以知识拓扑的方式进行呈现

三 增强识别语义的精准性：不管字段是拼音的、还是拼音首字母缩写的，大模型都可通过样本数据、表名、表注释、字段之间的上下文更精准的识别语义。

核心功能之分类分级标准梳理

尽管此前已有国标、行标指导，但是仍然面临数据分类的划分较粗略，或定义了共性的业务分类，无法完全直接应用。而且根据常规数据分类分级项目经验：分类分级标准基本都需要进行个性化调整会占1/3实施周期。大模型加持后，标准的输出可以缩短到1天完成，大量节省数据分类分级标准梳理时间。

核心功能之自动化分类分级

传统模式下，通过一个字段含义绑定一个分类和分级，实现自动分类分级的方式有两个弊端。一是横向的可复用能力比较少，二是字段含义的数量已达千万级，无法通过人工维护。

而数据认知与分类分级系统（AICogniSort）基于大语言模型的自动化分类分级，对于标准没有分类说明的，首先会对每个分类含义的补充和识别，然后进行字段的分类和分级。通过传入行业信息、业务系统、表说明、字段含义等表，基于对语义和上下文的理解，高效匹配分类，同时还可通过分类依据和置信度，让结果具有可解释性和可信任性。

核心功能之分类分级

美创科技数据认知与分类分级系统（AICogniSort）在完成分类分级后会输出3个重要清单：

一 重要/核心数据清单，基于合规需求，满足数据上报要求。

二 分类分级结果清单，有助于精细化数据安全管控。

三 数据资产清单，基于业务层面数据目录，方便取数、用数，释放数据价值。整体帮助用户构建可视化、可检索、可管理的数据目录。

通过数据认知与分类分级系统（AICogniSort）的分类分级结果可以用于数据安全治理、数据安全防护、数据上报、数据运维等多个层面，真正赋能数据应用百态。

此外，数据认知与分类分级系统（AICogniSort）形态是基于高算力的一体机，日均处理字段高达45万个。例如，对30万字段的医疗数据进行分类分级应用，整个实施周期包括分类分级确认仅需4天即可完成，而一般分类分级工具最少需要花费60天。

部署、应用美创科技数据认知与分类分级系统（AICogniSort），低成本、高精度、高效能完成分类分级任务。我们希望在AI的赋能下，分类分级工作能够以常态化和可持续的方式，不断为业务数据安全赋能。

企业资讯

CVE-2023-25690 | Apache HTTP Server up to 2.4.55 mod_proxy request smuggling (Nessus ID 211533)

Vuldb Updates
1 week 3 days ago
A vulnerability has been found in Apache HTTP Server up to 2.4.55 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component mod_proxy. The manipulation leads to http request smuggling. This vulnerability is known as CVE-2023-25690. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-25690 | Oracle Communications Element Manager 9.0.0/9.0.1 FEServer request smuggling (Nessus ID 211533)

Vuldb Updates
1 week 3 days ago
A vulnerability, which was classified as very critical, has been found in Oracle Communications Element Manager 9.0.0/9.0.1. Affected by this issue is some unknown functionality of the component FEServer. The manipulation leads to http request smuggling. This vulnerability is handled as CVE-2023-25690. The attack may be launched remotely. There is no exploit available.
vuldb.com

CVE-2023-31122 | Apache HTTP Server up to 2.4.57 mod_macro buffer overflow (FEDORA-2023-3d1bf0ee44 / Nessus ID 211533)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in Apache HTTP Server up to 2.4.57. It has been declared as critical. This vulnerability affects unknown code of the component mod_macro. The manipulation leads to buffer overflow. This vulnerability was named CVE-2023-31122. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-31122 | Oracle Communications Unified Assurance up to 5.5.19/6.0.3 Core denial of service (Nessus ID 211533)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in Oracle Communications Unified Assurance up to 5.5.19/6.0.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Core. The manipulation leads to denial of service. This vulnerability is known as CVE-2023-31122. The attack can be launched remotely. There is no exploit available.
vuldb.com

CVE-2024-2494 | libvirt RPC Library API g_new0 allocation of resources (RHSA-2024:2560 / Nessus ID 211542)

Vuldb Updates
1 week 3 days ago
A vulnerability classified as critical was found in libvirt. This vulnerability affects unknown code of the component RPC Library API. The manipulation of the argument g_new0 leads to allocation of resources. This vulnerability was named CVE-2024-2494. The attack needs to be approached within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2024-6126 | Red Hat Enterprise Linux 7/8/9 cockpit user_readenv resource consumption (Nessus ID 211538)

Vuldb Updates
1 week 3 days ago
A vulnerability has been found in Red Hat Enterprise Linux 7/8/9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component cockpit. The manipulation of the argument user_readenv leads to resource consumption. This vulnerability is known as CVE-2024-6126. An attack has to be approached locally. There is no exploit available.
vuldb.com

CVE-2024-32662 | FreeRDP up to 3.5.0 WCHAR String out-of-bounds (GHSA-vffh-j6hh-95f4 / Nessus ID 211551)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in FreeRDP up to 3.5.0. It has been classified as critical. This affects an unknown part of the component WCHAR String Handler. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2024-32662. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2023-5481 | Google Chrome up to 117.0.5938.149 Downloads Remote Code Execution (Nessus ID 211612)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in Google Chrome. It has been rated as critical. Affected by this issue is some unknown functionality of the component Downloads. The manipulation leads to Remote Code Execution. This vulnerability is handled as CVE-2023-5481. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-46824 | Linux Kernel up to 6.10.9 iommufd cache_invalidate_user null pointer dereference (89827a4de802/a11dda723c64 / Nessus ID 211620)

Vuldb Updates
1 week 3 days ago
A vulnerability was found in Linux Kernel up to 6.10.9 and classified as critical. Affected by this issue is the function cache_invalidate_user of the component iommufd. The manipulation leads to null pointer dereference. This vulnerability is handled as CVE-2024-46824. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

关于xpoc联动问题

90Sec - 专注于网络空间安全
1 week 3 days ago

❯ ./xpoc_darwin_amd64 --disable reverse-client-dnslog
__ /\ /_. . _____
| |/ / / __./ __./ |
| /XRAY™// / / / / /
/ . | / ./ // / /.
/ /|| / / //
/v0.1.0/ cloud plugins: [426]
go load fail: go-poc-weaver-e-cology-oa-sql_injection-CT-787974.go.bin: go-poc-weaver-e-cology-oa-sql_injection-
poc:reverse-registry: XRAYKIT 注册了新反连: reverse-client-gunkit [registry.go:48]
poc:reverse-client-new: 新反连客户端不可用 原因: invalid character 'p' after top-level value [client.go:18]

调试半天config文件一直报这种错误,有哪位大佬解决此问题的

1 个帖子 - 1 位参与者

阅读完整话题

biock

Managed ad