Aggregator

CVE-2005-4491 | Sitekit Solutions Sitekit CMS up to 6.6 default.aspx ClickFrom cross site scripting (EDB-26947 / BID-16016)

Vuldb Updates
3 months 3 weeks ago
A vulnerability, which was classified as problematic, was found in Sitekit Solutions Sitekit CMS up to 6.6. Affected is an unknown function of the file default.aspx. The manipulation of the argument ClickFrom leads to cross site scripting. This vulnerability is traded as CVE-2005-4491. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2016-7405 | ADOdb Library up to 5.20.6 on PHP5 PDO Driver qstr sql injection (FEDORA-2016-14bc73b990 / Nessus ID 93873)

Vuldb Updates
3 months 3 weeks ago
A vulnerability classified as very critical was found in ADOdb Library up to 5.20.6 on PHP5. Affected by this vulnerability is the function qstr of the component PDO Driver. The manipulation leads to sql injection. This vulnerability is known as CVE-2016-7405. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

1951 年被拐走的加州男孩还活着

Solidot
3 months 3 weeks ago
1951 年 2 月 21 日下午，6 岁的 Luis Armando Albino 和 10 岁的哥哥 Roger 在加州奥克兰 Jefferson Square Park 玩耍，他们一家最近从波多黎各移居加州。此时一名 30 多岁的女性接近他们，用西班牙语和 Luis 聊天，承诺跟她走有糖吃。Luis 同意了，Roger 更警惕，他跟踪他们走了一会儿后回家，告诉了家人。警方接到报警后展开了调查，但一无所获。他的母亲 Antonia 一直相信儿子还活着。70 年后的 2020 年，Luis 的侄女 Alida Alequin 接受了 DNA 测试。这项服务返回的结果提供了几位可能的亲戚。其中一位是 Alequin 从未见过的男性，她怀疑就是自己失踪的叔叔。她第一次尝试联系没有收到回复。今年早些时候，她再次尝试，带着照片和证据去了奥克兰警局的失踪人员部门。FBI 和加州司法部也调查了 Alequin 的线索。他们发现该男子住在东海岸，曾担任消防员，随海军陆战队两次前往越南服役。DNA 测试确认他就是 Luis。今年 6 月，Luis 飞往加州与家人团聚。他感谢 Alequin 找到了他。

Windows 漏洞利用盲文“空格”进行零日攻击

嘶吼
3 months 3 weeks ago

最近修复的“Windows MSHTML 欺骗漏洞”被追踪为 CVE-2024-43461，现在被标记为之前已被利用，因为它曾被 Void Banshee APT 黑客组织用于攻击。在 2024 年 9 月补丁星期二首次披露时，微软并未将该漏洞标记为之前被利用。然而，微软在最新更新的 CVE-2024-43461 公告中，表明它在修复之前曾被利用用于攻击。

该漏洞的发现归功于零日高级威胁研究员 Peter Girnus，他发现 Void Banshee 在零日攻击中利用 CVE-2024-43461 漏洞来安装窃取信息的恶意软件。

Void Banshee 是其首次追踪的一个 APT 黑客组织，其目标是北美、欧洲和东南亚的组织，以窃取数据和获取经济利益为主要目的。

CVE-2024-43461 零日漏洞

7 月份，Check Point Research 和 Trend Micro 均报告了同样的攻击，这些攻击利用 Windows 零日漏洞感染设备，并安装 Atlantida 信息窃取程序，用于从受感染设备窃取密码、身份验证 cookie 和加密货币钱包。

此次攻击利用了被追踪为 CVE-2024-38112（7 月修复）和 CVE-2024-43461（本月修复）的零日漏洞作为攻击链的一部分。

CVE-2024-38112 零日漏洞的发现归功于 Check Point 研究员 Haifei Li，他表示，该漏洞被用来强制 Windows 在启动特制的快捷方式文件时在 Internet Explorer 中打开恶意网站，而不是在 Microsoft Edge 中打开。

研究员在 7 月份的 Check Point Research 报告中解释道：“攻击者使用特殊的 Windows Internet 快捷方式文件（.url 扩展名），单击该文件时，会调用已退役的 Internet Explorer（IE）来访问攻击者控制的 URL。”

这些 URL 用于下载恶意 HTA 文件并提示用户打开它。打开后，将运行脚本来安装 Atlantida 信息窃取程序。HTA 文件利用另一个零日漏洞（跟踪为 CVE-2024-43461）来隐藏 HTA 文件扩展名，并在 Windows 提示用户是否应打开时使文件显示为 PDF，如下所示。

ZDI 研究员 Peter Girnus 表示，CVE-2024-43461 漏洞也被用于 Void Banshee 攻击，通过包含 26 个编码盲文空白字符 (%E2%A0%80) 的 HTA 文件名创建 CWE-451 条件以隐藏 .hta 扩展名。

如下所示，文件名以 PDF 文件开头，但包含 26 个重复编码盲文空白字符 (%E2%A0%80)，后跟最后的“.hta”扩展名。

Books_A0UJKO.pdf%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80%E2%A0%80.ht

当 Windows 打开此文件时，盲文空白字符会将 HTA 扩展推到用户界面之外，仅在 Windows 提示中用“...”字符串划定界限，如下所示。这导致 HTA 文件显示为 PDF 文件，使其更有可能被打开。

盲文空白字符将 HTA 扩展推离了视线

安装 CVE-2024-43461 的安全更新后，Girnus 表示空格未被删除，但 Windows 现在在提示中显示文件的实际 .hta 扩展名。

安全更新现在显示 HTA 扩展

但这个修复并不完美，因为包含的空格可能仍然会让人们误以为该文件是 PDF 而不是 HTA 文件。

微软在 9 月补丁星期二修复了其他三个被积极利用的零日漏洞，其中包括 CVE-2024-38217，该漏洞被利用于 LNK 踩踏攻击中以绕过 Web 安全功能的标记。

胡金鱼

Offensive cyber operations are more than just attacks

Help Net Security
3 months 3 weeks ago

In this Help Net Security interview, Christopher Jones, Chief Technology Officer and Chief Data Officer at Nightwing, talks about some key misconceptions and complexities surrounding offensive cyber operations. Many myths stem from a simplistic view of these operations, ranging from direct attacks to enhancing defenses through techniques like penetration testing. Advances in AI and quantum computing are expected to reshape the field by improving both offensive capabilities and threats, including more sophisticated attacks and vulnerabilities. … More →

The post Offensive cyber operations are more than just attacks appeared first on Help Net Security.

Mirko Zorz

CVE-2016-7660 | Apple watchOS up to 3.1.2 syslog access control (HT207487 / EDB-40959)

Vuldb Updates
3 months 3 weeks ago
A vulnerability was found in Apple watchOS up to 3.1.2. It has been classified as critical. Affected is an unknown function of the component syslog. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2016-7660. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

Paid open-source maintainers spend more time on security

Help Net Security
3 months 3 weeks ago

Paid maintainers are 55% more likely to implement critical security and maintenance practices than unpaid maintainers and are dedicating more time to implementing security practices like those included in industry standards like the OpenSSF Scorecard and the NIST Secure Software Development Framework (SSDF), according to Tidelift. Open source is the modern application development platform, with up to 98% of applications containing open-source components and open-source code making up 70% or more of the average application. … More →

The post Paid open-source maintainers spend more time on security appeared first on Help Net Security.

Help Net Security

CVE-2014-6945 | dakshaa Neeku Naaku Dash Dash 1 X.509 Certificate cryptographic issues (VU#582497)

Vuldb Updates
3 months 3 weeks ago
A vulnerability classified as critical has been found in dakshaa Neeku Naaku Dash Dash 1. This affects an unknown part of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is uniquely identified as CVE-2014-6945. The attack can only be initiated within the local network. There is no exploit available.
vuldb.com

CVE-2014-6944 | mitfahrgelegenheit.at 2.3.0 X.509 Certificate cryptographic issues (VU#582497)

Vuldb Updates
3 months 3 weeks ago
A vulnerability was found in mitfahrgelegenheit.at 2.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is handled as CVE-2014-6944. The attack can only be done within the local network. There is no exploit available.
vuldb.com

地球曾经也有星环

Solidot
3 months 3 weeks ago
在太阳系中，土星凭借其宽阔绮丽的星环成为最美丽的行星之一。发表于《地球和行星科学快报》的一项研究指出，地球也曾拥有星环。研究指出，4.66 亿年前，在险些与一颗小行星相撞后，地球周围形成了一个星环，并持续了数千万年，这可能对地球的气候产生了重大影响。研究人员首先确定了位于世界各地的 21 个形成于 4.66 亿年前奥陶纪撞击高峰时期的陨石坑遗址。这些陨石坑是星环内较大的星体碎片被抛出轨道后撞击地球形成的。考虑到板块构造引起的大陆运动，研究人员追溯了这些撞击点 4.66 亿年前的位置，发现它们都位于赤道附近。而这与星环的存在是一致的，因为通常星环形成于行星赤道上方。

Managed ad