Aggregator

预计到 2032 年将达到惊人的1548 亿美元，复合年增长率（ CAGR ）为23.6%。

看雪论坛作者ID：压强带师

Чем же закончилась битва индийского предпринимателя с мировыми СМИ?

A vulnerability classified as problematic was found in Apache NimBLE up to 1.7.0. Affected by this vulnerability is an unknown functionality of the component HCI Event Parser. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2024-51569. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Apache NimBLE up to 1.7.0. Affected is an unknown function of the component HCI Advertising Report Validation. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-47250. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apache NimBLE up to 1.7.0. It has been rated as problematic. This issue affects some unknown processing of the component HCI Event Handler. The manipulation leads to out-of-bounds read. The identification of this vulnerability is CVE-2024-47249. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apache NimBLE up to 1.7.0. It has been declared as critical. This vulnerability affects unknown code of the component MESH Message Handler. The manipulation leads to buffer overflow. This vulnerability was named CVE-2024-47248. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Qualcomm Snapdragon Wired Infrastructure and Networking. It has been classified as critical. This affects an unknown part. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2018-11952. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile and Snapdragon Wearables and classified as very critical. Affected by this issue is some unknown functionality of the component Touch Pal Application. The manipulation leads to configuration. This vulnerability is handled as CVE-2018-11922. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Qualcomm Snapdragon Connectivity and Snapdragon Mobile 630 Mobile Platform/636 Mobile Platform/9206 LTE Modem/APQ8017/AR6003 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to use after free. This vulnerability is known as CVE-2017-18153. The attack needs to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as very critical, was found in Qualcomm Snapdragon Mobile up to SD 850. Affected is an unknown function of the component 802.11 Frame Handler. The manipulation leads to buffer over-read. This vulnerability is traded as CVE-2017-17772. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Qualcomm Snapdragon Mobile MDM9206/MDM9607/SD 835/SD 845/SD 850. This issue affects some unknown processing of the component WLAN Host Driver. The manipulation leads to improper input validation. The identification of this vulnerability is CVE-2017-15832. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Qualcomm Snapdragon Wired Infrastructure and Networking MDM9206/MDM9607/SD 835/SD 845/SD 850. This vulnerability affects unknown code of the component xbl_sec. The manipulation leads to improper authentication. This vulnerability was named CVE-2016-10394. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Sharp/Toshiba Tec MFP. This affects an unknown part. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2024-36254. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Sharp/Toshiba Tec MFP. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to incorrect permission assignment. This vulnerability is handled as CVE-2024-28955. The attack may be launched remotely. There is no exploit available.

TI Lookup from ANY.RUN is a versatile tool for gathering up-to-date intelligence on the latest cyber threats. The best way to demonstrate its effectiveness is to hear from actual security professionals about how they use the service in their daily work.   This time, we asked Jane_0sint, an accomplished network traffic analyst and the first ANY.RUN […]

The post Investigating Phishing Threats with TI Lookup: Use Cases from an Expert appeared first on ANY.RUN's Cybersecurity Blog.

360安全大脑监测到多起通过投递携带有“简历”相关话题的钓鱼鱼叉邮件作为初始访问阶段攻击载荷，诱导用户收取并打开其中携带的压缩包附件

360安全大脑监测到多起通过投递携带有“简历”相关话题的钓鱼鱼叉邮件作为初始访问阶段攻击载荷，诱导用户收取并打开其中携带的压缩包附件

360安全大脑监测到多起通过投递携带有“简历”相关话题的钓鱼鱼叉邮件作为初始访问阶段攻击载荷，诱导用户收取并打开其中携带的压缩包附件