Aggregator

Submit #475135 / VDB-290445

Submit #475134 / VDB-290444

Vulnerability / Network SecurityTaiwan-based Moxa has warned of two security vulnerabilities impac

Taiwan-based Moxa has warned of two security vulnerabilities impacting its cellular routers, secure routers, and network security appliances that could allow privilege escalation and command execution. The list of vulnerabilities is as follows - CVE-2024-9138 (CVSS 4.0 score: 8.6) - A hard-coded credentials vulnerability that could allow an authenticated user to escalate privileges and gain

HTML中的0宽度空格是一个不可见的字符，它用于在HTML中创建小的间隔或强制文本或元素在同一行内显示。要在HTML中插入0宽度空格，你可以使用字符实体&#82

HTML中的0宽度空格是一个不可见的字符，它用于在HTML中创建小的间隔或强制文本或元素在同一行内显示。 要在 […]

Submit #475076 / VDB-290443

A vulnerability was suspected in Linux Kernel up to 6.6.13/6.7.1. This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all.

Imagine a hidden marketplace where sensitive information, proprietary data and corporate vulnera

While it occupies only a sliver of the internet, the dark web has become a growing threat to businesses everywhere.

The post Dark Web Dangers Aren’t as Hidden as You Think appeared first on Security Boulevard.

A vulnerability was suspected in WordPress. This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all.

A vulnerability was suspected in WordPress up to 6.5.4. Further investigation has shown that this issues is a false-positive. Please review the sources mentioned and consider not using this entry at all.

#软件资讯 Mozilla Firefox v134.0 正式版发布，带来 HEVC 硬件解码支持和改进弹出式窗口的拦截问题。其中 HEVC 硬件解码自然最重要，HEVC 硬件解码有助

A vulnerability, which was classified as problematic, was found in vickydalmia Coupon Plugin up to 1.2.1 on WordPress. Affected is an unknown function. The manipulation of the argument Coupon Code leads to cross site scripting. This vulnerability is traded as CVE-2024-12516. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, has been found in WpDevArt Booking Calendar Plugin and Booking Calendar Pro Plugin up to 3.2.19 on WordPress. This issue affects some unknown processing. The manipulation of the argument calendar_id leads to cross site scripting. The identification of this vulnerability is CVE-2024-12077. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as very critical was found in IronTemplates Croma Music Plugin up to 3.6 on WordPress. This vulnerability affects the function ironMusic_ajax. The manipulation leads to missing authorization. This vulnerability was named CVE-2024-12202. The attack can be initiated remotely. There is no exploit available.

shiro密钥爆破，应对[shiro 1.2.4]cve-2016-4437 修复后的版本，讨论了两种回显方法

#行业资讯 微软发布博客称 2025 年是 Windows 11 PC 更新之年，预计数百万用户将迁移到新 PC。微软称今年将有大量用户从旧版操作系统迁移到 Windows 11，同时

shiro-web 路径绕过