Aggregator

A vulnerability was found in Google Go on Windows. It has been declared as critical. Affected by this vulnerability is the function os.DirFS/http.Dir. The manipulation leads to pathname traversal. This vulnerability is known as CVE-2022-41720. The attack needs to be approached within the local network. There is no exploit available.

A vulnerability was found in oretnom23 Sanitization Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /php-sms/admin/?page=services/view_service. The manipulation of the argument ID leads to sql injection. This vulnerability is handled as CVE-2022-44393. The attack can only be done within the local network. There is no exploit available.

A vulnerability classified as problematic has been found in labstack echo on Windows. This affects an unknown part of the component Static File Handler. The manipulation leads to pathname traversal. This vulnerability is uniquely identified as CVE-2020-36565. The attack can only be initiated within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in hope-boot 1.0.0. This vulnerability affects unknown code. The manipulation leads to deserialization. This vulnerability was named CVE-2022-44371. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in ZZCMS 2022. This issue affects some unknown processing of the file admin/ad_list.php. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2022-44361. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Zorlan Skycaiji 2.5.1. It has been rated as critical. This issue affects some unknown processing of the file /SkycaijiApp/admin/controller/Mystore.php. The manipulation leads to deserialization. The identification of this vulnerability is CVE-2022-44351. The attack needs to be done within the local network. There is no exploit available.

A vulnerability, which was classified as problematic, was found in qubes-mirage-firewall up to 0.8.3. This affects an unknown part of the component Multicast UDP Packet Handler. The manipulation leads to resource consumption. This vulnerability is uniquely identified as CVE-2022-46770. The attack needs to be approached within the local network. Furthermore, there is an exploit available.

A vulnerability was found in TRENDnet Wireless AC Easy-Upgrader TEW-820AP 1.0R. It has been classified as critical. Affected is an unknown function. The manipulation leads to stack-based buffer overflow. This vulnerability is traded as CVE-2022-44373. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in AyaCMS 3.1.2. This issue affects some unknown processing. The manipulation leads to injection. The identification of this vulnerability is CVE-2022-45550. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Oracle Communications Unified Assurance up to 5.5.9/6.0.1. It has been classified as critical. Affected is an unknown function of the component Core. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2022-41720. It is possible to launch the attack remotely. There is no exploit available.

A significant security vulnerability (CVE-2025-34028) has been discovered in Commvault Command Center Innovation Release, enabling unauthenticated attackers to execute arbitrary code remotely. The vulnerability, which carries a high CVSS score of 9.0, affects explicitly version 11.38 of the Command Center installation and could lead to complete system compromise if exploited. Security researchers have identified a […]

The post Critical Commvault RCE Vulnerability Lets Remote Attackers Execute Arbitrary Code appeared first on Cyber Security News.

玩过《我的世界》的同学都知道，钻石是这款游戏中最稀有的物品之一，产量低，找寻复杂，即使准备充分，玩家更多的时候也得靠运气。

在搜索引擎中搜索“我的世界如何快速找到钻石”，会发现有1000万+的内容量，可见“找钻石”应该算是《我的世界》玩家的头号大事了。

原文链接：https://mp.weixin.qq.com/s/lca68xYc20MwTQLMQ2dSew

这个月，多伦多大学举办了一场特别活动，邀请2024年诺贝尔物理学奖得主、被称为"AI教父"的杰弗里·辛顿（Geoffrey Hinton）大学荣誉教授与即将上任的校长梅兰妮·伍登（Melanie Wooden）进行了一场对话。

原文链接：https://mp.weixin.qq.com/s/PXScqqCxhMT8Zkw5P1Bh_w

HackerNews 编译，转载请注明出处： 与伊朗有关联的威胁组织UNC2428在2024年10月针对以色列发起以招聘为主题的社会工程攻击，其通过部署名为MURKYTOUR的后门实施网络间谍活动。 谷歌旗下Mandiant公司将UNC2428称为与伊朗结盟的威胁组织，该组织通过“复杂的欺骗技术链”部署恶意软件。 根据Mandiant 2025年度《M-Trends报告》，UNC2428伪装成以色列国防承包商拉斐尔（Rafael）的招聘方，诱导目标用户访问仿冒网站并下载所谓的“求职辅助工具”。 该工具（“RafaelConnect.exe”）实为LONEFLEET安装程序，启动后会向受害者展示图形用户界面（GUI），要求输入个人信息并提交简历。一旦用户提交信息，LEAFPILE启动器将在后台激活MURKYTOUR后门，使攻击者获得对受感染设备的持续访问权限。 Mandiant指出：“伊朗相关威胁组织通过图形用户界面将恶意软件伪装成合法应用。这类仿冒安装程序的界面设计能有效降低目标用户的怀疑”。 此活动与以色列国家网络局归因于伊朗威胁组织黑影（Black Shadow）的攻击存在重叠，后者受伊朗情报和安全部（MOIS）支持，以攻击以色列学术、旅游、通信、金融等多领域而闻名。 2024年，多个伊朗威胁组织瞄准以色列，包括使用专有擦除器POKYBLIGHT的Cyber Toufan组织。 另一组织UNC3313通过钓鱼攻击进行监视和信息收集，其攻击手段包括在文件共享平台托管恶意软件，并嵌入以培训和网络研讨会为主题的钓鱼链接。UNC3313还分发JELLYBEAN投放器和CANDYBOX后门，并滥用9种合法远程监控工具（RMM）规避检测。 2024年7月，疑似伊朗背景的攻击者伪装成Palo Alto Networks的GlobalProtect远程访问软件安装包，暗中部署.NET后门CACTUSPAL。该后门启动后验证进程唯一性，随后与外部C2服务器通信。 伊朗威胁组织如UNC1549还通过云基础设施增强隐蔽性，例如利用拼写错误域名（Typosquatting）或复用合法域名托管C2节点。APT42（又名Charming Kitten）则通过伪造谷歌、微软、雅虎登录页面窃取凭证，并利用Google Sites和Dropbox引导目标访问虚假Google Meet页面。 2024年，Mandiant在中东攻击活动中识别出20余种伊朗组织专用恶意软件家族，包括APT34（OilRig）用于攻击伊拉克政府实体的DODGYLAFFA和SPAREPRIZE后门。该公司警告：“伊朗相关威胁组织将持续调整战术手段以适应当前形势。”     消息来源：thehackernews； 本文由 HackerNews.cc 翻译整理，封面来源于网络；  转载请注明“转自 HackerNews.cc”并附上原文

A vulnerability has been found in Popular Posts Plugin up to 6.0.5 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper initialization. This vulnerability is known as CVE-2022-43468. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability classified as critical was found in Omron CX-Programmer up to 9.77. Affected by this vulnerability is an unknown functionality of the component CXP File Handler. The manipulation leads to use after free. This vulnerability is known as CVE-2022-43508. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Omron CX-Programmer up to 9.77. Affected by this issue is some unknown functionality of the component CXP File Handler. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2022-43509. The attack may be launched remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Omron CX-Programmer up to 9.77. This affects an unknown part of the component CXP File Handler. The manipulation leads to stack-based buffer overflow. This vulnerability is uniquely identified as CVE-2022-43667. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability has been found in Cybozu Remote Service 4.0.0/4.0.1/4.0.2/4.0.3 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to resource consumption. This vulnerability was named CVE-2022-44608. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in UNIMO UDR-JA1604, UDR-JA1608 and UDR-JA1616 up to 71x10.1.107112.43A. It has been rated as critical. Affected by this issue is some unknown functionality of the component Setting Handler. The manipulation leads to os command injection. This vulnerability is handled as CVE-2022-43464. The attack may be launched remotely. There is no exploit available.