Aggregator

2025-01-04 (SATURDAY): FOUR DAYS OF SCANS AND PROBES AND WEB TRAFFIC HITTING MY WEB SERVERNOTES:

OMB Memo M-24-15 published on

OMB Memo M-24-15 published on July 24, 2024 directed GSA and the FedRAMP PMO to streamline the FedRAMP ATO process using NIST OSCAL. By late 2025 or early 2026 (18 months after the issuance of the memo), GSA must ensure the ability to receive FedRAMP authorization and continuous monitoring artifacts through automated, machine-readable means. Additionally, […]

The post Making FedRAMP ATOs Great with OSCAL and Components appeared first on Security Boulevard.

A vulnerability was found in Dacode 1.2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IMG Tag Handler. The manipulation leads to basic cross site scripting. This vulnerability is handled as CVE-2002-1805. The attack may be launched remotely. Furthermore, there is an exploit available.

By •January 04, 2025•Daily Blog

SmartExcel是什么SmartExcel是一款在线AI Excel 公式生成器， 使用 AI 在几秒钟内生成 Excel 公式，直接描述你的需求，AI即可根据你的需求生成Excel公式，直接复制

SmartExcel是什么SmartExcel是一款在线AI Excel 公式生成器， 使用 AI 在几秒钟内生成 Excel 公式，直接描述你的需求，AI即可根据你的需求生成Excel公式，直...

A vulnerability was found in Apple Safari and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2009-0162. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

主站 分类 漏洞 工具 极客

契机今天看到一篇文章契机今天看到一篇文章让我有了估算大黑阔赚钱能力的灵感。给网安行业泼盆开水！

2024 年 12 月，国内人工智能公司 DeepSeek 推出最新开源大型语言模型 DeepSeek-V3。它运用混合专家（MoE）架构，参数高达 6710 亿，处理每个 token 时激活 370

2024 年 12 月，国内人工智能公司 DeepSeek 推出最新开源大型语言模型 DeepSeek-V3。它运用混合专家（MoE）架构，参数高达 6710 亿，处理每个 token 时激活 ...

A vulnerability classified as critical has been found in 2daybiz Custom T-Shirt Design Script. Affected is an unknown function of the file products_details.php. The manipulation of the argument designid leads to sql injection. This vulnerability is traded as CVE-2010-2691. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in FiberHome Router. This affects an unknown part of the file /cgi-bin/webproc. The manipulation of the argument getpage leads to path traversal. This vulnerability is uniquely identified as CVE-2017-15647. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Sun Solaris 7.0/8.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library ximp40. The manipulation of the argument arg0 leads to memory corruption. This vulnerability is handled as CVE-2001-0165. It is possible to launch the attack on the local host. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Уязвимости роутеров становятся главной целью для киберпреступников.

A vulnerability was found in Apple Mac OS X up to 10.11.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component apache_mod_php. The manipulation leads to deserialization. This vulnerability is handled as CVE-2015-6834. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

近日，一起大规模的数据泄露事件震动了网络安全界。名为“HikkI-Chan”的黑客在臭名昭著的Breach Forums上泄露了超过3.9亿VK用户的个人信息。

一、事件背景随着区块链技术的快速发展，以太坊作为其中的代表性平台，其智能合约的安全性受到了广泛关注。许多开发者和企业都在寻求有效的工具来检测和修复智能合约中的漏洞，以保障资产安全和业务稳定运行。然而，