Aggregator

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.8.6. This issue affects some unknown processing of the component Bluetooth. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2024-35963. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Envoy up to 1.28.6/1.29.4/1.30.0. It has been rated as critical. Affected by this issue is the function sendLocalReply. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2024-45810. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Тайные контракты и секретные миссии, о которых не принято говорить вслух.

今天 Anthropic 正式发布 Stable Diffusion 3.5，这是它们迄今为止最强的模型，此公开版本包含多个型号变体，包括 Stable Diffusion 3.5 Large ...

За ошибки ИБ-отдела будут расплачиваться руководители аптек.

前言：Diffusers Image Outpaint 技术，是一种基于扩散模型的图像生成方法。它能根据现有图像内容，生成图像的外部区域，使图像看起来更自然和完整。这在图像编辑、游戏开发、虚拟现...

真正完全免费! 100%本地离线运行的ChatGPT最佳替代,完全免费开源 可以导入各大开源的AI大模型,支持Windows 、Mac 和linux系统，可以随时随地，哪怕在没有网络的情况下, ...

Llama 3 模型的发布彰显了Meta在开源AI领域的决心和影响力。我们有理由期待,Llama 3将为自然语言处理、机器学习等AI前沿技术的发展注入新动力。 在线使用：【链接直达】 不仅可以智...

一款免费开源的项目即可搞定：ChatGPT、Claude、Google Gemini、Mistral、LLaMA2等主流AI大模型的无缝切换使用！ Lobe UI 是一个开源 UI 组件库，用于...

The Onion купила конспирологическую обитель и решила навести свои порядки.

USX Cyber released advanced phishing protection tools within its GUARDIENT XDR platform. This latest enhancement enables organizations to strengthen defenses against sophisticated phishing attacks by providing employees with realistic training and heightened awareness of phishing threats. Phishing attacks are growing increasingly sophisticated and dangerous as threat actors exploit social engineering techniques and AI to enhance their tactics. The new suite includes a phishing simulation tool that mimics real-world phishing techniques, equipping employees to identify and respond … More →

The post USX Cyber strengthens phishing defense in GUARDIENT XDR appeared first on Help Net Security.

WordPress-ReallySimpleSecurity插件认证绕过漏洞(CVE-2024-10924)

有人问怎么挖比特币，实际比特币挖不了，是成本太高不赚，除非胆子大或者资源好。 勉为其难给你们一个挖比特币的教程吧，不构成任何的投资建议，大家凑个热闹就行了，因为零度用的是太阳能，白天电费是免费的...

Великобритания теряет триллионы из-за цифровой осторожности.

致力于第一时间为企业级用户提供权威漏洞情报和有效解决方案。

Submit #443272 / VDB-284686

A vulnerability classified as critical has been found in EyouCMS up to 1.6.7. Affected is an unknown function of the component Website Logo Handler. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2024-11211. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

总结推荐本周的热点资讯、安全事件、一周好文和省心工具，保证大家不错过本周的每一个重点！

作者：Cxxsheng 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 前言 温馨提示，阅读本文前，应当对Bundle Mismatch相关漏洞有初步了解，以下参考资料假如您还没有读过，建议先阅读一下： Bundle风水——Android序列化与反序列化不匹配漏洞详解：经典的入门级别教程。 Android 反序列化...