Aggregator

Submit #471113 / VDB-289769

Submit #471112 / VDB-289768

Submit #471111 / VDB-289767

Submit #471109 / VDB-289766

A vulnerability was found in Apple iOS up to 6.1.4. It has been declared as very critical. This vulnerability affects unknown code of the component WebKit. The manipulation leads to improper resource management. This vulnerability was named CVE-2013-2842. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

1993 年英特尔发布了奔腾高性能处理器。一年之后 Nicely 教授在研究孪生素数时发现他的奔腾计算机在执行浮点除时会产生错误结果。1/824633702441 在三台奔腾计算机上的结果都是错误的，但旧计算机却能给出正确的答案。Nicely 教授其实不是第一个发现浮点除 bug 的人，几个月前英特尔内部测试就发现了该 bug，它估计出错的概率非常低，大约为 1/90 亿，认为问题微不足道，虽然如此它仍然悄悄修改了电路以修复问题。Nicely 教授在发现问题之后致电了英特尔技术支持，但对方不予理睬。于是他向计算机杂志和业内知名人士发送了该 bug 的电邮，其中一位收件人是《Undocumented DOS》作者 Andrew Schulman，他转发给了一家 DOS 软件公司的联合创始人 Richard Smith，Smith 随后将其发布在了 Compuserve 论坛上。Electronic Engineering Times 杂志的一位记者看到帖子后在杂志上撰写了有关奔腾 bug 的报道。英特尔解释说，bug 存在于被称为 PLA(Programmable Logic Array)的组件上，它充当了除法运算的查找表。它已经修复了 bug 将会为客户替换有问题的处理器。问题本应该就此了结了，然而英特尔对想要更换处理器的客户施加了限制，要求客户说服工程师他们需要如此高的精度才能替换，此举激怒了客户，再次引发了广泛的负面报道。当年 12 月 12 日 IBM 宣布停售奔腾计算机，英特尔随后屈服，宣布召回所有有缺陷的芯片，这次召回花费了英特尔 4.75 亿美元。

A vulnerability has been found in PHPGurukul Maid Hiring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search-maid.php. The manipulation of the argument searchdata leads to sql injection. This vulnerability is known as CVE-2024-13014. The attack can be launched remotely. Furthermore, there is an exploit available.

A Threat Actor Claims to have Leaked the Data of National Library of Peru on Behalf of DefacePeru

A vulnerability classified as very critical was found in Lotus Domino 5.0.2a/5.0.2c. This vulnerability affects unknown code of the component ESMTP Service. The manipulation of the argument RCPT TO/SAML FROM/SOML FROM leads to memory corruption. This vulnerability was named CVE-2000-1046. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

Two botnets tracked as 'Ficora' and 'Capsaicin' have recorded increased activity in targeting D-Link routers that have reached end of life or are running outdated firmware versions. [...]

Вымогатель потребовал выкуп за зашифрованные данные компании.

miyako is Allegedly Selling Root-level Access to a Server Hosting the Firewall of a Large US Bank

A vulnerability was found in gnome libzvt2 1.4.2.19. It has been classified as problematic. Affected is an unknown function of the component Helper. The manipulation leads to authentication bypass by spoofing. This vulnerability is traded as CVE-2005-0023. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.

A vulnerability was found in Apple Mac OS X up to 10.11.5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component OpenSSL. The manipulation leads to information disclosure. This vulnerability is known as CVE-2016-2107. The attack can be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

列举一些 2024 年我常用的小东西。