Aggregator

Райан Даль бросил компании вызов, способный разрушить былые IT-устои.

A vulnerability was found in Mozilla Convict up to 6.2.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Object Prototype Handler. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). This vulnerability is handled as CVE-2023-0163. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO up to 1.6.3. It has been declared as very critical. Affected by this vulnerability is the function capture_packages. The manipulation leads to os command injection. This vulnerability is known as CVE-2024-50374. The attack can be launched remotely. There is no exploit available.

A vulnerability was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. It has been classified as very critical. Affected is the function restore_config_from_utility. The manipulation leads to os command injection. This vulnerability is traded as CVE-2024-50373. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO and classified as very critical. This issue affects the function backup_config_to_utility. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2024-50372. The attack may be initiated remotely. There is no exploit available.

A vulnerability has been found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO and classified as very critical. This vulnerability affects the function wlan_scan. The manipulation leads to os command injection. This vulnerability was named CVE-2024-50371. The attack can be initiated remotely. There is no exploit available.

新闻速览•以可信安全促数据要素流通，《可信数据空间发展行动计划（2024—2028年）》发布•工信部CSTIS发布关于防范Remcos RAT恶意软件新变种的风险提示•内核级BYOVD攻击再现，威胁超

点击蓝字关注我们牛品推荐之慧御ASM随着企业数字化转型的不断深化，云计算，大数据，物联网等新技术的不断引入，企业的数字化资产种类和数量都在不断增加，如业务网站、APP、小程序、云资源、算力资源等。这些

A vulnerability, which was classified as very critical, was found in Advantech EKI-6333AC-2G, EKI-6333AC-2GD and EKI-6333AC-1GPO. This affects the function cfg_cmd_set_eth_conf of the component edgserver Service. The manipulation leads to os command injection. This vulnerability is uniquely identified as CVE-2024-50370. It is possible to initiate the attack remotely. There is no exploit available.

Vulnerability / Network SecurityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) o

Sitecore CMS未经身份验证任意文件读取漏洞(CVE-2024-46938)

What Is Network Slicing? Network slicing is a virtual networking technique that creates multiple logical networks on the same physical network infrastructure, providing flexibility in the allocation and use of network resources. Network slicing involves creating slices in a network according to the various needs of...

A Trend Micro analysis of Earth Estries found that the Chinese threat actor is using new backdoors to avoid detection during espionage operations

Sitecore Exploit (@assetnote + @plopz0r), CI/CD CTF (@MagisterQuis), new M

Вымогатели нанесли удар по ключевым системам глобального бизнеса.