Aggregator

链接器开发101~

Every month, we witness a significant rise in data breaches. Over the past six months, India has experienced a surge in cyber-attacks, with 388 data breaches, 107 data leaks, and...

The post Data Breaches for the Month July 2024 appeared first on Strobes Security.

The post Data Breaches for the Month July 2024 appeared first on Security Boulevard.

近期，火山引擎多媒体实验室团队提出了一种高质量3D Gaussian-Splatting场景重建及低延迟重渲染技术，用于对场景进行高质量的重建，并支持复杂的重打光及实时渲染。

Apple has issued security updates to address multiple vulnerabilities across iOS, macOS, tvOS, visionOS, watchOS, and Safari. Apple released security updates to address multiple vulnerabilities in iOS, macOS, tvOS, visionOS, watchOS, and Safari. The IT giant released iOS 17.6 and iPadOS 17.6 to address dozens of security vulnerabilities, including authentication and policy bypasses, information disclosure […]

人机混合智能技术在金融领域的应用越来越多，最新大模型技术已成为数字科技与金融领域结合的热点，为以整体思维和系统认知破解金融科技发展难题提供了有效解决方案。金融领域大模型开发和应用取得可喜突破。

为依法严厉惩治跨境电信网络诈骗等犯罪活动，最高人民法院、最高人民检察院、公安部近日印发《关于办理跨境电信网络诈骗等刑事案件适用法律若干问题的意见》，对办理跨境电信网络诈骗等刑事案件的法律适用、追赃挽损等进行了规定。

一图读懂《网络暴力信息治理规定》。

日前，在吸收采纳各方意见建议的基础上，人力资源社会保障部等部门正式发布了网络安全等级保护测评师、云网智能运维员、生成式人工智能系统应用员等19个新职业，以及直播招聘师等28个新工种，并调整变更了11个职业（工种）信息。

7月31日，第十二届互联网安全大会（ISC.AI 2024）在北京国家会议中心盛大开幕。

ISC.AI 2024第十二届互联网安全大会开幕，三六零集团创始人周鸿祎表示，用AI重塑安全的本质是让安全做到“自动驾驶”，360首推安全大模型，对购买360标准产品的用户免费提供大模型标准能力，实现大模型普惠和安全行业新质生产力变革。

2024年7月31日，以“打造安全大模型，引领安全行业革命”为主题的ISC.AI 2024第十二届互联网安全大会在北京国家会议中心召开。吴世忠院士从文献统计和内容分析两个层面分享了对生成式AI的九点观察和四点启示，以下为报告节选。

Проект приказа с новыми критериями был опубликован на федеральном портале 30 июля.

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM) and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. This vulnerability was named CVE-2024-7339. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. It is recommended to apply restrictive firewalling.

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument week/sTime/eTime leads to buffer overflow. This vulnerability is uniquely identified as CVE-2024-7338. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. This vulnerability is handled as CVE-2024-7337. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. This vulnerability is known as CVE-2024-7336. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected is the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&setting. The manipulation of the argument http_host leads to buffer overflow. This vulnerability is traded as CVE-2024-7335. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. It has been rated as critical. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation leads to buffer overflow. The identification of this vulnerability is CVE-2024-7334. The attack may be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in TOTOLINK N350RT 9.3.5u.6139_B20201216. It has been declared as critical. This vulnerability affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument week/sTime/eTime leads to buffer overflow. This vulnerability was named CVE-2024-7333. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability was found in TOTOLINK CP450 4.1.0cu.747_B20191224. It has been classified as critical. This affects an unknown part of the file /web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. This vulnerability is uniquely identified as CVE-2024-7332. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.