Aggregator

Submit #455061 / VDB-286909

Submit #455058 / VDB-286908

因博通对VMware产品涨价10倍 英国某服务器提供商转向开源方案

“危“”机“并存，五位网络安全大咖预警2025年安全态势

四大行业协会同日发布安全提示声明：审慎采购美国芯片；Safari浏览器零日漏洞或已遭利用，多个Apple应用平台被波及 | 牛览

A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file hotelnew.c of the component Available Room Handler. The manipulation of the argument admin_entry leads to stack-based buffer overflow. The identification of this vulnerability is CVE-2024-12186. Local access is required to approach this attack. Furthermore, there is an exploit available.

A vulnerability has been found in code-projects Hotel Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Administrator Login Password Handler. The manipulation of the argument Str2 leads to stack-based buffer overflow. This vulnerability was named CVE-2024-12185. An attack has to be approached locally. Furthermore, there is an exploit available.

禁漫天堂/哔咔/拷贝/哔哩漫画下载器

Submit #454852 / VDB-284530

Submit #454851 / VDB-284719

Hell froze over: FBI and NSA recommend you use strong encryption.

The post China is Still Inside US Networks — It’s Been SIX Months appeared first on Security Boulevard.

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-12183. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116. Affected by this issue is some unknown functionality of the file /member/soft_add.php. The manipulation of the argument body leads to cross site scripting. This vulnerability is handled as CVE-2024-12182. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploads_add.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. This vulnerability is known as CVE-2024-12181. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulation of the argument body leads to cross site scripting. This vulnerability is traded as CVE-2024-12180. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Submit #454846 / VDB-286907

Submit #454844 / VDB-286906

从忽视安全到设计安全，美国大型软件厂商大幅改进产品安全

价值超30亿元的数字货币被盗，这家交易所宣布关闭

Cloudflare Pages, a popular web deployment platform, is exploited by threat actors to host phishing sites, as attackers leverage Cloudflare’s trusted infrastructure, global CDN, and free hosting to quickly set up and deploy convincing phishing sites.  Automatic SSL/TLS encryption enhances the sites’ legitimacy, while custom domains and URL masking further obfuscate their malicious nature. Cloudflare’s […]

The post Cloudflare Developer Domains Abused For Cyber Attacks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.