Aggregator

A vulnerability has been found in Michael Lamont Savant Webserver 2.1/3.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component GET Request Handler. The manipulation leads to improper privilege management. This vulnerability is known as CVE-2000-0641. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

流行减肥药 liraglutide 或 semaglutide 被发现也有助于减少酒精摄入。酒精相关障碍(Alcohol-Related Disorders)是一种复发性疾病，每年 260 万人死亡与之相关，占全球年死亡人数的 4.7%。戒酒非常困难，七成戒酒者会在一年内重新饮酒。胰高血糖素样肽-1（GLP-1）被用于治疗肥胖，在动物实验中被发现也有助于减少酒精摄入，但人体研究才刚刚起步。最新研究涉及 262 名超重或肥胖者，平均年龄 46 岁，平均体重 98 公斤。他们被允许服用 GLP-1 减肥。根据参与者自我报告的酒精消费量，研究人员将他们分成不饮酒者、少量饮酒者和经常饮酒者。在服用 GLP-1 四个月后，他们的平均酒精摄入量减少了三分之二，其中经常饮酒者减少了 68%。参与者称戒酒变得轻而易举。

A vulnerability was found in SOS JobScheduler 1.11/1.13.2. It has been rated as problematic. This issue affects some unknown processing of the component JOC Cockpit. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2020-6854. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Source Integration Plugin up to 1.6.1/2.3.0 on MantisBT. It has been classified as problematic. Affected is an unknown function of the file repo_delete.php. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2020-8981. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in IBM Sterling B2B Integrator Standard Edition up to 5.2.6.5. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to open redirect. The identification of this vulnerability is CVE-2019-4595. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Siemens Spectrum Power up to 5.50 HF01. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. This vulnerability is known as CVE-2020-7579. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, has been found in Soplanning 1.45. Affected by this issue is some unknown functionality of the file process/xajax_server.php. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2020-9267. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Soplanning 1.45 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2020-9338. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Soplanning 1.45 and classified as problematic. This issue affects some unknown processing of the file status.php. The manipulation of the argument Name/Comment leads to cross site scripting. The identification of this vulnerability is CVE-2020-9339. The attack may be initiated remotely. There is no exploit available.

SPIRE is a graduated project of the Cloud Native Computing Foundation (CNCF). It’s a production-ready implementation of the SPIFFE APIs that handles node and workload attestation to securely issue SVIDs to workloads and verify the SVIDs of other workloads, all based on a predefined set of conditions. SPIRE architecture and components Common use cases include securing service-to-service communication in microservices architectures, enabling zero trust networking, and supporting secure multi-cloud or hybrid cloud deployments. Organizations also … More →

The post SPIRE: Toolchain of APIs for establishing trust between software systems appeared first on Help Net Security.

Name: San Diego CTF 2025 (an San Diego CTF event.)
Date: May 9, 2025, 11 p.m. — 11 May 2025, 23:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://ctf.sdc.tf/
Rating weight: 22.18
Event organizers: 3 Prongs And a Computer

Name: DamCTF 2025 (an DamCTF event.)
Date: May 10, 2025, midnight — 12 May 2025, 00:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://damctf.xyz/
Rating weight: 60.67
Event organizers: OSUSEC

Name: GooseCTF - misc0nfig 25 (an GooseCTF event.)
Date: May 10, 2025, 11 a.m. — 11 May 2025, 22:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://goosectf.lilypadd.com/
Rating weight: 0.00
Event organizers: Warwick Cyber Security Society

Разработчикам понадобилось всего 10 лет, чтобы понять: не стоит светиться в эфире по таймеру.

A vulnerability has been found in SockJS up to 2.x and classified as problematic. This vulnerability affects unknown code in the library lib/transport/htmlfile.js. The manipulation of the argument c as part of Parameter leads to cross site scripting (Reflected). This vulnerability was named CVE-2020-8823. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Soplanning 1.45. Affected by this vulnerability is an unknown functionality of the file process/xajax_server.php. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2020-9266. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as problematic was found in sitepress-multilingual-cms Plugin up to 4.3.7-b.1 on WordPress. Affected by this vulnerability is an unknown functionality of the file includes/class-wp-installer.php. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2020-10568. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in signotec signoPAD-API-Web up to 3.1.0 on Windows. This issue affects some unknown processing of the component WebSocket. The manipulation leads to improper input validation. The identification of this vulnerability is CVE-2020-9343. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in signotec signoPAD-API-Web up to 3.1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Websocket Handler. The manipulation leads to allocation of resources. This vulnerability is known as CVE-2020-9345. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Microsoft SharePoint Enterprise Server, SharePoint Foundation and SharePoint Server and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. This vulnerability was named CVE-2020-0894. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.