Aggregator

ZDI-CAN-25259: Autodesk

ZDI: Upcoming Advisories
5 months 1 week ago
A CVSS score 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H severity vulnerability discovered by 'Rocco Calvi (@TecR0c) with TecSecurity' was reported to the affected vendor on: 2024-09-03, 58 days ago. The vendor is given until 2025-01-01 to publish a fix or workaround. Once the vendor has created and tested a patch we will coordinate the release of a public advisory.

CVE-2017-16387 | Adobe Acrobat Reader memory corruption (APSB17-36 / Nessus ID 104626)

Vuldb Updates
5 months 1 week ago
A vulnerability, which was classified as critical, was found in Adobe Acrobat Reader up to 11.0.22/2015.006.30355/2017.011.30066/2017.012.20098. This affects an unknown part. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2017-16387. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

京都大学将启动用 iPS 细胞治疗糖尿病的临床试验

Solidot
5 months 1 week ago
日本京都大学医院最早 2025 年实施把利用 iPS 细胞培养的胰脏细胞膜移植给糖尿病患者的临床试验。京都大学等开发出了利用 iPS 细胞培养胰岛细胞、形成薄膜状的技术。以这种技术为基础，制定了在京都大学医院进行临床试验的计划。2024 年 8 月下旬，获得京都大学临床试验审查委员会批准，已将计划书提交给负责医药品审批的日本医药品医疗器械综合机构（PMDA）。该技术利用以健康人的细胞培养的iPS细胞制造的胰岛细胞块，聚集多个后制成数厘米见方的薄膜状。通过手术将多个薄膜移植到患者的腹部皮下。移植的薄膜可以产生胰岛素，代替患者原有的胰岛细胞，降低血糖水平，从而减少患者身体的负担和并发症的风险。

CVE-2014-5841 | cybird Girls Calendar Period/Weight 3.2.2 X.509 Certificate cryptographic issues (VU#582497)

Vuldb Updates
5 months 1 week ago
A vulnerability, which was classified as critical, was found in cybird Girls Calendar Period and Weight 3.2.2. This affects an unknown part of the component X.509 Certificate Handler. The manipulation leads to cryptographic issues. This vulnerability is uniquely identified as CVE-2014-5841. Access to the local network is required for this attack. There is no exploit available.
vuldb.com

四天工作制在日本难以推广

Solidot
5 months 1 week ago
日本的工作文化以勤奋著称，当政府试图减少工作时间推行四天工作制时，它发现面临重重阻力。日本国会议员是在 2021 年首度提出缩短工作时间，减少过劳死，限制加班和增加带薪年假。三年之后日本厚生劳动省称，只有 8% 的企业允许员工每周休息三天或三天以上。不仅仅企业，员工也犹豫不决。松下在 2022 年初宣布支持四天工作制，但 6.3 万名合格员工中只有 150 人选择了四天工作制。员工不愿意多休一天的主要原因是将企业放在首位的工作文化，以及表现出团队精神和勤奋工作的同侪压力。

Managing low-code/no-code security risks

Help Net Security
5 months 1 week ago

Continuous threat exposure management (CTEM) – a concept introduced by Gartner – monitors cybersecurity threats continuously rather than intermittently. This five-stage framework (scoping, discovery, prioritization, validation, and mobilization) allows organizations to constantly assess and manage their security posture, reduce exposure to threats, and integrate risk management into a continuous assessment and action loop. A prime candidate for inclusion under the CTEM umbrella is software created in low-code/ no-code (LCNC) and robotic process automation (RPA) environments. … More →

The post Managing low-code/no-code security risks appeared first on Help Net Security.

Help Net Security

CVE-2007-1979 | Xoops Xoops Popnupblog up to 2.52 index.php get_blogid_from_postid sql injection (EDB-3655 / BID-23286)

Vuldb Updates
5 months 1 week ago
A vulnerability was found in Xoops Xoops Popnupblog up to 2.52 and classified as critical. Affected by this issue is the function get_blogid_from_postid of the file index.php. The manipulation of the argument postid leads to sql injection. This vulnerability is handled as CVE-2007-1979. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

网络安全知识手册正式发布

嘶吼
5 months 1 week ago

国家网络安全宣传周

网络安全知识手册

2024年国家网络安全宣传周将于9月9日至15日在全国范围举行。

网络安全知识手册，正式发布！

请将手机旋转90度、锁定屏幕，

开启网络安全知识学习之旅吧~

文章来源自：网络安全宣传周

企业资讯

New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access

The Hackers News
5 months 1 week ago
Eight vulnerabilities have been uncovered in Microsoft applications for macOS that an adversary could exploit to gain elevated privileges or access sensitive data by circumventing the operating system's permissions-based model, which revolves around the Transparency, Consent, and Control (TCC) framework. "If successful, the adversary could gain any privileges already granted to the affected
The Hacker News

Managed ad