Aggregator

CVE-2010-4968 | webmaster-tips Com Wmtpic 1.0 index.php Itemid sql injection (EDB-14128 / BID-41253)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in webmaster-tips Com Wmtpic 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument Itemid leads to sql injection. The identification of this vulnerability is CVE-2010-4968. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2009-4688 | Resalecode PHP Shopping Cart Selling Website Script index.php cross site scripting (EDB-34710 / XFDB-51914)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in Resalecode PHP Shopping Cart Selling Website Script and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2009-4688. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2009-2361 | osTicket 1.6 include/class.staff.php Username sql injection (EDB-9032 / XFDB-51417)

Vuldb Updates
4 months 2 weeks ago
A vulnerability classified as critical has been found in osTicket 1.6. Affected is an unknown function of the file include/class.staff.php. The manipulation of the argument Username leads to sql injection. This vulnerability is traded as CVE-2009-2361. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2009-4082 | Lanifex Outreach Project Tool up to 0.939 index.php CRM_path code injection (EDB-10218 / XFDB-54379)

Vuldb Updates
4 months 2 weeks ago
A vulnerability classified as critical was found in Lanifex Outreach Project Tool up to 0.939. Affected by this vulnerability is an unknown functionality of the file opt/forums/Forum_Include/index.php. The manipulation of the argument CRM_path leads to code injection. This vulnerability is known as CVE-2009-4082. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2010-0632 | Parkviewconsultants Com Simplefaq index.php catid sql injection (EDB-11294 / XFDB-56028)

Vuldb Updates
4 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in Parkviewconsultants Com Simplefaq. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument catid leads to sql injection. This vulnerability is handled as CVE-2010-0632. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2010-2681 | Com Sef on Joomla index.php mosConfigabsolutepath code injection (EDB-14055 / BID-41166)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in Com Sef on Joomla. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument mosConfigabsolutepath leads to code injection. This vulnerability is handled as CVE-2010-2681. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2006-4649 | BinGo News up to 3.01 bp_news.php bnrep code injection (EDB-2312 / ADV-2006-3494)

Vuldb Updates
4 months 2 weeks ago
A vulnerability was found in BinGo News up to 3.01. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file bp_news.php. The manipulation of the argument bnrep leads to code injection. This vulnerability is known as CVE-2006-4649. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2006-1590 | Kevin Johnson Basic Analysis/Security Engine 1.2.4 base_graph_main.php printfreshpage $_server cross site scripting (EDB-27574 / XFDB-25671)

Vuldb Updates
4 months 2 weeks ago
A vulnerability has been found in Kevin Johnson Basic Analysis and Security Engine 1.2.4 and classified as problematic. This vulnerability affects the function printfreshpage of the file base_graph_main.php. The manipulation of the argument $_server leads to basic cross site scripting. This vulnerability was named CVE-2006-1590. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2006-1590 | Analysis Console for Intrusion Databases ACID PrintFreshPage $_SERVER['REQUEST_URI'] cross site scripting (EDB-27574 / XFDB-25671)

Vuldb Updates
4 months 2 weeks ago
A vulnerability classified as problematic has been found in Analysis Console for Intrusion Databases ACID. Affected is the function PrintFreshPage. The manipulation of the argument $_SERVER['REQUEST_URI'] leads to basic cross site scripting. This vulnerability is traded as CVE-2006-1590. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com

ChatGPT 让我们变蠢？

Solidot
4 months 2 weeks ago
搜索引擎从某种程度上是人类记忆的外包，而在查询结果时人类仍然需要运用批判性思维和语境去进行解读。对于以 ChatGPT 为代表的生成式 AI 工具，人类可能将思考过程也外包出去了。生成式 AI 工具不仅能检索信息，还可以创造、分析和总结信息。这代表着一种根本性的转变：生成式 AI 是第一种能取代人类思考和创造力的技术。这就引起了一个重要问题：ChatGPT 会让我们变蠢？生成式 AI 取代了筛选信息来源、比较观点和克服模糊性的需求，可能会削弱人的批判性思维、解决复杂问题和深入理解信息的能力。关键不是是否使用生成式 AI，而是如何使用。如果不加批判地使用，ChatGPT 可能会导致智力上的自满。生成式 AI 的普及让网民走到了十字路口：一条路会导致智力的衰退，走向一个由 AI 替人类思考的世界；另一条路创造了一个机会，AI 能帮助增加和扩展我们的智力。

第三届“天网杯”网络安全大赛正式启动

嘶吼
4 months 2 weeks ago

7月25日，第三届“天网杯”网络安全大赛正式启动。本次大赛由天津市人民政府主办，国家计算机病毒应急处理中心及多家国家级科研机构和天津市相关委办局共同承办，360数字安全集团、先进计算与关键软件（信创）海河实验室、中汽智联技术有限公司、天津市网络与数据安全生态协会、大数据协同安全技术国家工程研究中心、ISC平台、南京赛宁信息技术有限公司等单位联合支持。

本届大赛以“筑牢数字安全屏障，护航国家发展大局”为核心目标，聚焦网络安全、数字安全和人工智能安全等前沿技术领域，设置关键产品漏洞挖掘挑战赛、人工智能安全挑战赛和智能网联汽车安全挑战赛三大赛道。通过举办大赛，推动数字浪潮下网络安全技术实现系统性突破。

作为网络安全领域的标杆赛事，大赛突破领域界限，向“政、产、学、研、用”各界开放报名通道。目前，大赛官网已经上线并发布赛事信息，同步开启线上报名，参赛选手可在大赛官网（https://twcup.cverc.org.cn）自行注册、报名、组队参赛，组委会将对报名战队进行参赛资格审核；8月初，组织取得参赛资格选手战队进行线上初赛；9月上旬，大赛组委会专家委员会将对初赛成果进行入围评审；9月下旬，将在天津举办线下决赛和颁奖仪式。

据了解，在成功举办前两届大赛的基础上，今年的大赛将致力于推动安全技术自主创新与产业协同发展，积极构建“以赛育才”产学研生态链，夯实国家网络安全战略人才基石，筑牢数字中国“技术底座”，进一步维护网络空间安全防线。

企业资讯

来啦！XCon2025大会日程热力解锁！惊喜票价燃动启售~~

嘶吼
4 months 2 weeks ago

XCon2025安全焦点信息安全技术峰会

将于8月22日，在北京民航国际会议中心燃动启幕


当AI重构攻防战场，我们执技术之刃重划安全边界！

这一次，我们将再度集结全球网络安全技术大脑

重新定义AI时代下的安全范式

向你汇报这一年

优秀的安全技术人他们的思考、实践与创新

重新解构安全的定义，从容拥抱与AI共生的未来


大会完整日程正式解锁，邀你一同共赴盛宴！

五大主题专区·高频共振

【经典深度场】

10场纯享型技术演讲·400分钟全程干货在线

领略网安前沿技术应用实践，把握AI时代技术脉搏

从痛点直击到创新突破

邀你沉浸技术饕餮


【新锐无界场】

再次携手国内超活跃青年技术社区HackingGroup

感受网安新锐力量的活力与脑洞

轻松交流·无界分享

入圈与破圈·跨界与升维


【极客市集】

香港+吉隆坡Group惊喜亮相

漏洞研究+智能体实践+硬件互动破解

别怕不懂黑话，沉浸极客文化


【展商专区】

活力网安厂牌，拉新·互动·扩列·赢礼

极客文化与潮流聚集地

好友列表疯狂+1

品牌限定周边拿到手软


【来个Offer·招聘专区】

网安大厂+专精厂商，多个优岗急聘急招

投个简历·来个Offer

遇见更多机会·成就更好的自己

24年！首发「学生票」，宠粉极客青年

XCon品牌创立24年，首次开设「学生票」

旨在集结网络安全新生力量

激发中国网络安全创新活力

多类型票种同步启售·更多团享福利即刻下单

【体验票】¥0元，含：无界场+极客市集+展商专区+招聘专区

【学生票】¥398元，XCon2025全场通——含：深度场＋无界场+极客市集＋展商专区＋招聘专区 

*特别说明：购买学生票，现场验票时，须出示有效期内学生证。如无法提供有效证件，需按普通票补齐票价

【学生票】团购专项 2张享9折、5张享7折、10张享5折

【普通票】¥2790元，XCon2025全场通——含：深度场＋无界场+极客市集＋展商专区＋招聘专区

【普通票】团购专项 5张享7折、10张享5折

XCon组委会

CVE-2019-6716 | LogonBox Nervepoint Access Manager up to 2017 runJob.html jobId information disclosure (EDB-46254)

Vuldb Updates
4 months 2 weeks ago
A vulnerability classified as problematic was found in LogonBox Nervepoint Access Manager up to 2017. This vulnerability affects unknown code of the file runJob.html. The manipulation of the argument jobId as part of GET Request leads to information disclosure. This vulnerability was named CVE-2019-6716. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com

Managed ad