Aggregator

A vulnerability, which was classified as problematic, has been found in cayenne Anonymous Restricted Content Plugin up to 1.6.5 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to information disclosure. This vulnerability is handled as CVE-2024-11089. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Automatic Bug Reporting Tool. It has been rated as problematic. This issue affects some unknown processing of the file /var/tmp/abrt/*/maps. The manipulation leads to link following. The identification of this vulnerability is CVE-2015-3315. The attack needs to be approached locally. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

The U.S. Justice Department charged five suspects linked to the Scattered Spider cybercrime gang with wire fraud conspiracy. The U.S. Justice Department charged five alleged members of the cybercrime gang Scattered Spider (also known as UNC3944, 0ktapus) with conspiracy to commit wire fraud. “Law enforcement today unsealed criminal charges against five defendants who allegedly targeted employees of […]

An analysis of the websites belonging to companies that served as a front for getting North Korean IT workers remote jobs with businesses worldwide has revealed an active network of such companies originating in China. Unearthing North Korean IT front companies US authorities have been warning about North Korean IT workers’ tactics to bypass sanctions for a number of years, and have repeatedly seized website domains that looked like they belong to legitimate IT services … More →

The post Active network of North Korean IT front companies exposed appeared first on Help Net Security.

4G/5G fixed wireless access (FWA) represents a major growth opportunity for mobile network operators (MNOs) because they bring more traffic, new services, new subscribers, and, importantly, new revenue streams. According to Ericsson, there will be 330 million FWA 5G connections by 2029. With all this potential new...

A vulnerability classified as critical was found in ntopng 6.2. Affected by this vulnerability is the function Flow::dissectMDNS. The manipulation leads to heap-based buffer overflow. This vulnerability is known as CVE-2024-53426. The attack can only be initiated within the local network. There is no exploit available.

A vulnerability classified as problematic has been found in Kion Computer KION Exchange Programs Software up to 21.11.2024. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-7130. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Teknogis Informatics Closed Circuit Vehicle Tracking Software up to 21.11.2024. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to sql injection hibernate. The identification of this vulnerability is CVE-2024-7026. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Assimp 5.4.3. It has been declared as critical. This vulnerability affects the function SkipSpacesAndLineEnd. The manipulation leads to heap-based buffer overflow. This vulnerability was named CVE-2024-53425. Access to the local network is required for this attack to succeed. There is no exploit available.

The BianLian ransomware group has shifted exclusively to exfiltration-based extortion and is deploying multiple new TTPs for initial access and persistence

Operational Technology (OT) and Industrial Control Systems (ICS) are critical components of many industries, especially those within the 16 critical […]

The post Building and Enhancing OT/ICS Security Programs Through Governance, Risk, and Compliance (GRC) appeared first on Security Boulevard.

A vulnerability classified as problematic was found in Symantec Enterprise Firewall and VPN Appliances up to 1.62. This vulnerability affects unknown code of the component Configuration File. The manipulation leads to an unknown weakness. This vulnerability was named CVE-2004-1474. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

A vulnerability has been found in Macromedia JRun 3.0/3.1/4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Management Console. The manipulation leads to basic cross site scripting. This vulnerability is known as CVE-2004-1477. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Hitachi Cosminexus Enterprise 4.0 and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to memory corruption. This vulnerability is handled as CVE-2004-1478. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Symantec Enterprise Firewall 320/360/360r. This affects an unknown part. The manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-2004-1472. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Symantec Enterprise Firewall and VPN Appliances up to 1.62. This affects an unknown part. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2004-1473. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling.

A vulnerability, which was classified as critical, has been found in Vlad Alexa Mancini PHPFootball 1.5/1.6. Affected by this issue is some unknown functionality of the file filter.php. The manipulation of the argument dbfield leads to information disclosure. This vulnerability is handled as CVE-2009-0711. The attack may be launched remotely. Furthermore, there is an exploit available.