Aggregator

A vulnerability, which was classified as critical, has been found in AyaCMS 3.1.2. This issue affects some unknown processing. The manipulation leads to injection. The identification of this vulnerability is CVE-2022-45550. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Oracle Communications Unified Assurance up to 5.5.9/6.0.1. It has been classified as critical. Affected is an unknown function of the component Core. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2022-41720. It is possible to launch the attack remotely. There is no exploit available.

A significant security vulnerability (CVE-2025-34028) has been discovered in Commvault Command Center Innovation Release, enabling unauthenticated attackers to execute arbitrary code remotely. The vulnerability, which carries a high CVSS score of 9.0, affects explicitly version 11.38 of the Command Center installation and could lead to complete system compromise if exploited. Security researchers have identified a […]

The post Critical Commvault RCE Vulnerability Lets Remote Attackers Execute Arbitrary Code appeared first on Cyber Security News.

玩过《我的世界》的同学都知道，钻石是这款游戏中最稀有的物品之一，产量低，找寻复杂，即使准备充分，玩家更多的时候也得靠运气。

在搜索引擎中搜索“我的世界如何快速找到钻石”，会发现有1000万+的内容量，可见“找钻石”应该算是《我的世界》玩家的头号大事了。

原文链接：https://mp.weixin.qq.com/s/lca68xYc20MwTQLMQ2dSew

这个月，多伦多大学举办了一场特别活动，邀请2024年诺贝尔物理学奖得主、被称为"AI教父"的杰弗里·辛顿（Geoffrey Hinton）大学荣誉教授与即将上任的校长梅兰妮·伍登（Melanie Wooden）进行了一场对话。

原文链接：https://mp.weixin.qq.com/s/PXScqqCxhMT8Zkw5P1Bh_w

HackerNews 编译，转载请注明出处： 与伊朗有关联的威胁组织UNC2428在2024年10月针对以色列发起以招聘为主题的社会工程攻击，其通过部署名为MURKYTOUR的后门实施网络间谍活动。 谷歌旗下Mandiant公司将UNC2428称为与伊朗结盟的威胁组织，该组织通过“复杂的欺骗技术链”部署恶意软件。 根据Mandiant 2025年度《M-Trends报告》，UNC2428伪装成以色列国防承包商拉斐尔（Rafael）的招聘方，诱导目标用户访问仿冒网站并下载所谓的“求职辅助工具”。 该工具（“RafaelConnect.exe”）实为LONEFLEET安装程序，启动后会向受害者展示图形用户界面（GUI），要求输入个人信息并提交简历。一旦用户提交信息，LEAFPILE启动器将在后台激活MURKYTOUR后门，使攻击者获得对受感染设备的持续访问权限。 Mandiant指出：“伊朗相关威胁组织通过图形用户界面将恶意软件伪装成合法应用。这类仿冒安装程序的界面设计能有效降低目标用户的怀疑”。 此活动与以色列国家网络局归因于伊朗威胁组织黑影（Black Shadow）的攻击存在重叠，后者受伊朗情报和安全部（MOIS）支持，以攻击以色列学术、旅游、通信、金融等多领域而闻名。 2024年，多个伊朗威胁组织瞄准以色列，包括使用专有擦除器POKYBLIGHT的Cyber Toufan组织。 另一组织UNC3313通过钓鱼攻击进行监视和信息收集，其攻击手段包括在文件共享平台托管恶意软件，并嵌入以培训和网络研讨会为主题的钓鱼链接。UNC3313还分发JELLYBEAN投放器和CANDYBOX后门，并滥用9种合法远程监控工具（RMM）规避检测。 2024年7月，疑似伊朗背景的攻击者伪装成Palo Alto Networks的GlobalProtect远程访问软件安装包，暗中部署.NET后门CACTUSPAL。该后门启动后验证进程唯一性，随后与外部C2服务器通信。 伊朗威胁组织如UNC1549还通过云基础设施增强隐蔽性，例如利用拼写错误域名（Typosquatting）或复用合法域名托管C2节点。APT42（又名Charming Kitten）则通过伪造谷歌、微软、雅虎登录页面窃取凭证，并利用Google Sites和Dropbox引导目标访问虚假Google Meet页面。 2024年，Mandiant在中东攻击活动中识别出20余种伊朗组织专用恶意软件家族，包括APT34（OilRig）用于攻击伊拉克政府实体的DODGYLAFFA和SPAREPRIZE后门。该公司警告：“伊朗相关威胁组织将持续调整战术手段以适应当前形势。”     消息来源：thehackernews； 本文由 HackerNews.cc 翻译整理，封面来源于网络；  转载请注明“转自 HackerNews.cc”并附上原文

A vulnerability has been found in Popular Posts Plugin up to 6.0.5 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper initialization. This vulnerability is known as CVE-2022-43468. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability classified as critical was found in Omron CX-Programmer up to 9.77. Affected by this vulnerability is an unknown functionality of the component CXP File Handler. The manipulation leads to use after free. This vulnerability is known as CVE-2022-43508. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Omron CX-Programmer up to 9.77. Affected by this issue is some unknown functionality of the component CXP File Handler. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2022-43509. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Omron CX-Programmer up to 9.77. This affects an unknown part of the component CXP File Handler. The manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2022-43667. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in Cybozu Remote Service 4.0.0/4.0.1/4.0.2/4.0.3 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to resource consumption. This vulnerability was named CVE-2022-44608. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in UNIMO UDR-JA1604, UDR-JA1608 and UDR-JA1616 up to 71x10.1.107112.43A. It has been rated as critical. Affected by this issue is some unknown functionality of the component Setting Handler. The manipulation leads to os command injection. This vulnerability is handled as CVE-2022-43464. The attack may be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in Movable Type 7, Type Premium and Type Premium Advanced. This affects an unknown part. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2022-43660. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in UNIMO UDR-JA1604, UDR-JA1608 and UDR-JA1616 up to 71x10.1.107112.43A. This vulnerability affects unknown code of the component Setting Handler. The manipulation leads to os command injection. This vulnerability was named CVE-2022-44606. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in UNIMO UDR-JA1604, UDR-JA1608 and UDR-JA1616 up to 71x10.1.107112.43A. This issue affects some unknown processing of the component Setting Handler. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2022-44620. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Movable Type 7, Type Premium and Type Premium Advanced. Affected is an unknown function of the component URL Handler. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2022-45113. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Typora up to 1.4.3. This affects an unknown part of the component File Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2022-43668. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Movable Type 7, Type Premium and Type Premium Advanced. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2022-45122. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Buffalo WZR-300HP, WZR-450HP, WZR-600DHP, WZR-900DHP, HW-450HP-ZWE, WZR-450HP-CWT, WZR-450HP-UB, WZR-600DHP2 and WZR-D1100H. It has been declared as critical. This vulnerability affects unknown code of the component Configuration Setting Handler. The manipulation leads to hard-coded credentials. This vulnerability was named CVE-2022-34840. Access to the local network is required for this attack. There is no exploit available.

A vulnerability was found in Buffalo WHR-HP-G300N, WHR-HP-GN, WPL-05G300, WZR-300HP, WZR-450HP, WZR-600DHP, WZR-900DHP, WZR-HP-AG300H, WZR-HP-G302H, WLAE-AG300N, FS-600DHP, FS-G300N, FS-HP-G300N, FS-R600DHP, BHR-4GRV, DWR-HP-G300NH, DWR-PG, HW-450HP-ZWE, WER-A54G54, WER-AG54, WER-AM54G54, WER-AMG54, WHR-300, WHR-300HP, WHR-AM54G54, WHR-AMG54, WHR-AMPG, WHR-G, WHR-G300N, WHR-G301N, WHR-G54S, WHR-G54S-NI, WHR-HP-AMPG, WHR-HP-G, WHR-HP-G54, WLI-H4-D600, WLI-TX4-AG300N, WS024BF, WS024BF-NW, WZR2-G108, WZR2-G300N, WZR-450HP-CWT, WZR-450HP-UB, WZR-600DHP2, WZR-AGL300NH, WZR-AMPG144NH, WZR-AMPG300NH, WZR-D1100H, WZR-G144N, WZR-G144NH, WZR-HP-G300NH, WZR-HP-G301NH and WZR-HP-G450H. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2022-39044. Access to the local network is required for this attack to succeed. There is no exploit available.