Aggregator

A vulnerability classified as critical has been found in Movable Type 7, Type Premium and Type Premium Advanced. This affects an unknown part. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2022-43660. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in UNIMO UDR-JA1604, UDR-JA1608 and UDR-JA1616 up to 71x10.1.107112.43A. This vulnerability affects unknown code of the component Setting Handler. The manipulation leads to os command injection. This vulnerability was named CVE-2022-44606. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in UNIMO UDR-JA1604, UDR-JA1608 and UDR-JA1616 up to 71x10.1.107112.43A. This issue affects some unknown processing of the component Setting Handler. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2022-44620. The attack may be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, was found in Movable Type 7, Type Premium and Type Premium Advanced. Affected is an unknown function of the component URL Handler. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2022-45113. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Typora up to 1.4.3. This affects an unknown part of the component File Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2022-43668. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Movable Type 7, Type Premium and Type Premium Advanced. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2022-45122. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Buffalo WZR-300HP, WZR-450HP, WZR-600DHP, WZR-900DHP, HW-450HP-ZWE, WZR-450HP-CWT, WZR-450HP-UB, WZR-600DHP2 and WZR-D1100H. It has been declared as critical. This vulnerability affects unknown code of the component Configuration Setting Handler. The manipulation leads to hard-coded credentials. This vulnerability was named CVE-2022-34840. Access to the local network is required for this attack. There is no exploit available.

A vulnerability was found in Buffalo WHR-HP-G300N, WHR-HP-GN, WPL-05G300, WZR-300HP, WZR-450HP, WZR-600DHP, WZR-900DHP, WZR-HP-AG300H, WZR-HP-G302H, WLAE-AG300N, FS-600DHP, FS-G300N, FS-HP-G300N, FS-R600DHP, BHR-4GRV, DWR-HP-G300NH, DWR-PG, HW-450HP-ZWE, WER-A54G54, WER-AG54, WER-AM54G54, WER-AMG54, WHR-300, WHR-300HP, WHR-AM54G54, WHR-AMG54, WHR-AMPG, WHR-G, WHR-G300N, WHR-G301N, WHR-G54S, WHR-G54S-NI, WHR-HP-AMPG, WHR-HP-G, WHR-HP-G54, WLI-H4-D600, WLI-TX4-AG300N, WS024BF, WS024BF-NW, WZR2-G108, WZR2-G300N, WZR-450HP-CWT, WZR-450HP-UB, WZR-600DHP2, WZR-AGL300NH, WZR-AMPG144NH, WZR-AMPG300NH, WZR-D1100H, WZR-G144N, WZR-G144NH, WZR-HP-G300NH, WZR-HP-G301NH and WZR-HP-G450H. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2022-39044. Access to the local network is required for this attack to succeed. There is no exploit available.

RSAC 2025创新沙盒 | TwineSecurity ：数字员工驱动企业安全建设

LLMOps作为LLM应用的核心运维体系，其平台存在的数据泄露风险可能对模型部署的安全与合规性带来严重影响。

RSAC 2025创新沙盒 | TwineSecurity ：数字员工驱动企业安全建设

LLMOps作为LLM应用的核心运维体系，其平台存在的数据泄露风险可能对模型部署的安全与合规性带来严重影响。

A vulnerability, which was classified as critical, was found in VMware vSphere Data Protection 5.5.x/5.8.x/6.0.x/6.1.x. Affected is an unknown function of the component SSH Key. The manipulation leads to credentials management. This vulnerability is traded as CVE-2016-7456. It is possible to launch the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, has been found in Zabbix 2.2.13/3.0.0/3.0.1/3.0.2/3.0.3. Affected by this issue is some unknown functionality of the file latest.php. The manipulation of the argument array leads to sql injection. This vulnerability is handled as CVE-2016-10134. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in PostfixAdmin up to 3.0.1. It has been declared as problematic. This vulnerability affects the function gen_show_status of the file delete.php of the component AliasHandler. The manipulation of the argument delete leads to permission issues (Delete). This vulnerability was named CVE-2017-5930. The attack can be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, has been found in News Module up to 5.3.2 on TYPO3. This issue affects some unknown processing of the file NewsController.php. The manipulation of the argument overwriteDemand/OrderByAllowed leads to sql injection. The identification of this vulnerability is CVE-2017-7581. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as critical was found in Oracle Enterprise Session Border Controller up to Ecz7.3m2p2. This vulnerability affects unknown code of the component OpenSSL. The manipulation leads to cryptographic issues. This vulnerability was named CVE-2014-0224. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Oracle Communications Policy Management up to 9.7.3/9.9.1/10.4.1/12.1.1. It has been classified as critical. This affects an unknown part of the component OpenSSL. The manipulation leads to cryptographic issues. This vulnerability is uniquely identified as CVE-2014-0224. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

工作需要，咱们研究研究Java内存马来~~~

HackerNews 编译，转载请注明出处： 与朝鲜（朝鲜民主主义人民共和国，DPRK）存在关联的多个威胁活动集群被确认针对Web3及加密货币领域的机构与个人实施攻击。 谷歌旗下Mandiant公司在提供给《The Hacker News》的《2025 M-Trends报告》中指出：“朝鲜因遭受严厉国际制裁，其针对Web3与加密货币的攻击主要出于经济动机。这些活动旨在获取资金，据信用于支持朝鲜大规模杀伤性武器（WMD）计划及其他战略资产。” Mandiant表示，朝鲜相关攻击者已开发使用Golang、C++和Rust等多种语言编写的定制工具，具备感染Windows、Linux和macOS操作系统的能力。 追踪编号为UNC1069、UNC4899和UNC5342的三个威胁集群被发现重点攻击加密货币与区块链开发群体，主要渗透从事Web3项目的开发人员以非法获取加密货币钱包权限及其所属机构访问权限。各集群特征如下： UNC1069（活跃至少自2018年4月）：通过Telegram发送虚假会议邀请并伪装知名企业投资者身份，针对多行业实施社会工程攻击以窃取数字资产与加密货币 UNC4899（活跃自2022年）：以招聘测试为名分发恶意代码实施供应链攻击（与Jade Sleet、PUKCHONG、TraderTraitor等组织存在技术重叠） UNC5342（活跃自2024年1月）：使用含恶意代码的编程任务诱骗开发人员运行（与Contagious Interview、DEV#POPPER等组织存在技术重叠） 另一朝鲜攻击者UNC4736通过植入后门的交易软件渗透区块链行业，被指与2023年初3CX供应链攻击存在关联。Mandiant公司还发现独立集群UNC3782实施针对加密货币行业的大规模钓鱼攻击，2023年针对TRON用户实施钓鱼攻击，单日转移价值超1.37亿美元资产，2024年转向攻击Solana用户诱导其访问含加密货币流失器的页面。 朝鲜通过派遣数千名IT人员（主要居住在中国与俄罗斯）渗透欧美亚企业远程岗位，这些人员大多隶属负责核计划的313总局。他们使用盗用身份与完全虚构身份，在面试阶段运用Deepfake技术创建逼真合成身份。 单操作员可使用多个合成身份应聘同一职位，长期潜伏企业虚拟桌面、网络与服务器实施数据窃取与网络攻击。 Palo Alto Networks Unit 42研究员Evan Gordenker指出该策略使朝鲜IT人员可规避安全公告通缉，显著降低检测概率。谷歌威胁情报组（GTIG）报告显示渗透人员还通过勒索雇主、薪资回流平壤等方式支持朝鲜战略目标。 2024年某朝鲜IT人员使用至少12个虚构身份应聘欧美岗位，某美国公司同一岗位出现两名朝鲜渗透人员竞争，其中一人成功入职，另有机构12个月内雇佣四名朝鲜IT渗透人员。     消息来源：thehackernews； 本文由 HackerNews.cc 翻译整理，封面来源于网络；  转载请注明“转自 HackerNews.cc”并附上原文