Aggregator

美国黑客 Ilya Lichtenstein 因在 2016 年入侵交易所 Bitfinex 窃取 12 万枚比特币而被判 5 年徒刑。他在妻子 Heather Morgan 的帮助下洗钱，Morgan 将于 11 月 18 日宣布刑期。在盗窃发生时比特币价值 7000 万美元，等到他们于 2022 年被捕时总价值升至了 45 亿美元，如今随着币值单价接近 9 万美总价值再次翻倍。这是至今金额最高的比特币盗窃案之一。

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Affected by this issue is the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to stack-based buffer overflow. This vulnerability is handled as CVE-2024-11248. The attack may be launched remotely. Furthermore, there is an exploit available.

随着人工智能等新技术的兴起，相关利用AI进行的网络犯罪活动也逐渐增多。日前，谷歌发出警告，称发现多种颇具欺骗性的网络欺诈活动。

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=save_product of the component Inventory Page. The manipulation of the argument brand leads to cross site scripting. This vulnerability is known as CVE-2024-11247. The attack can be launched remotely. Furthermore, there is an exploit available. Other parameters might be affected as well.

A vulnerability, which was classified as problematic, was found in code-projects Farmacia 1.0. Affected is an unknown function of the file /adicionar-cliente.php. The manipulation of the argument nome/cpf/dataNascimento leads to cross site scripting. This vulnerability is traded as CVE-2024-11246. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The initial researcher advisory mentions the parameter "nome" to be affected. But further inspection indicates that other parameters might be affected as well.

A vulnerability, which was classified as critical, has been found in code-projects Farmacia 1.0. This issue affects some unknown processing of the file /editar-produto.php. The manipulation of the argument id leads to sql injection. The identification of this vulnerability is CVE-2024-11245. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in code-projects Farmacia 1.0. This vulnerability affects unknown code of the file /editar-cliente.php. The manipulation of the argument id leads to sql injection. This vulnerability was named CVE-2024-11244. The attack can be initiated remotely. Furthermore, there is an exploit available.

A critical vulnerability has been discovered in the popular “Really Simple Security” WordPress plugin, formerly known as “Really Simple SSL,” putting over 4 million websites at risk. The flaw, identified as CVE-2024-10924, exposes websites using the plugin to potential remote attacks, enabling threat actors to gain unauthorized administrative access. Vulnerability Overview The vulnerability affects versions 9.0.0 […]

The post 4M+ WordPress Websites to Attacks, Following Plugin Vulnerability appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #443204 / VDB-284684

Полиция поймала участника крупнейшего криптоограбления в Индии.

Submit #443194 / VDB-284683

近期，安天CERT监测到一起挖矿木马攻击事件，该挖矿木马从2024年3月开始出现，并持续更新攻击脚本。

Submit #443189 / VDB-284682

Submit #443188 / VDB-284681

Submit #443177 / VDB-284680

A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument m2 with the input <svg%20onload=alert(document.cookie)> leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-11243. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ad_list.php?action=pass of the component Keyword Filtering. The manipulation of the argument keyword leads to sql injection. This vulnerability is handled as CVE-2024-11242. The attack may be launched remotely. Furthermore, there is an exploit available.

中国已成为世界最大的工业机器人市场，去年中国安装了逾 276,000 台机器人，占全球的半数以上。过去大部分工业机器人都是进口的，主要是来自日本、德国和美国。如今中国企业越来越多地采用国产机器人，国产型号的价格通常是进口型号的一小部分，有助于降低成本，但问题是谁来操纵这些智能机器？中国制造业严重依赖于总数不足 3 亿的农民工，而他们的平均教育水平虽然在缓慢提高，但其中 52% 的农民工只接受过中学教育，14% 只接受过小学教育。研究人员发现，低教育水平的农民工最有可能被机器人取代。农民工也越来越多的转向薪酬更低的服务业。官方统计数据显示，2023 年 28% 的农民工从事制造业，54% 从事服务业。中国有大量接受良好教育的工程师和技术工人。他们仍然需要接受培训才能使用工业机器人。

A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file reset.php. The manipulation of the argument e leads to sql injection. This vulnerability is known as CVE-2024-11241. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #442075 / VDB-284679