Aggregator

Санкции США подтолкнули компанию к неожиданным решениям.

A vulnerability was found in Exnet Informatics Software Ferry Reservation System and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-7835. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Exnet Informatics Software Ferry Reservation System and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. This vulnerability was named CVE-2024-7735. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in b1g b1gBB 2.24. This issue affects some unknown processing of the file visitenkarte.php. The manipulation of the argument user leads to basic cross site scripting. The identification of this vulnerability is CVE-2007-3590. The attack may be initiated remotely. Furthermore, there is an exploit available.

For the latest discoveries in cyber research for the week of 23rd September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Medusa ransomware gang has claimed responsibility for an attack on the Providence Public School District (PPSD) in Rhode Island. The school district is still grappling with ongoing internet outages since September 11, […]

The post 23rd September – Threat Intelligence Report appeared first on Check Point Research.

胡金鱼

公司简介 | 我要投稿

The grants of roughly $200,000 each will go to organizations that are working to address the nation’s shortage of skilled cybersecurity employees.

A vulnerability, which was classified as critical, has been found in b1gBB. This issue affects some unknown processing of the file showboard.php. The manipulation of the argument id leads to sql injection. The identification of this vulnerability is CVE-2007-3589. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Perl and classified as critical. This issue affects some unknown processing. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2011-1487. The attack may be initiated remotely. Furthermore, there is an exploit available.

如何获取美亚纸版书的 PDF：寄送扫描服务及手工优化记录Matrix 首页推荐 Matrix 是少数派的写作社区，我们主张分享真实的产品体验，有实用价值的经验与思考。我们会不定期挑选 Matrix 最

A vulnerability was found in Checkmk up to 2.2.0p33/2.3.0p15. It has been rated as critical. This issue affects some unknown processing of the component Two Factor Authentication. The manipulation leads to incorrect authorization. The identification of this vulnerability is CVE-2024-8606. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical has been found in Xiaomi Router AX9000 1.0.173. Affected is an unknown function. The manipulation leads to command injection. This vulnerability is traded as CVE-2024-45348. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as problematic was found in Acronis Cyber Protect Cloud Agent 36943/37758/38235 on Windows/macOS. Affected by this vulnerability is an unknown functionality of the component Setting Handler. The manipulation leads to execution with unnecessary privileges. This vulnerability is known as CVE-2024-8903. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

С какими еще угрозами сталкиваются пользователи из ЕС и кто за этим стоит?

深信服云网端安全七问七答：风险减量、效果保底这么做！ 日期：2024年09月23日 阅：71

具透 | 这或许才是完全体，visionOS 2 中值得你关注的新功能 少数派编辑部 等 2 位作者 11:30随着 iOS 18 和 macOS Sequoia 等 Apple 生态系统的软件更新，

iOS 18 открывает новую эру управления доступом.

The threat group UNC1860, linked to Iran's security intelligence agency, gains initial access into networks around the region and hands that access off to other Iranian-associated hackers to established persistent and long-term access, Mandiant says.

The post Iranian-Linked Group Facilitates APT Attacks on Middle East Networks appeared first on Security Boulevard.