Aggregator

44项网络安全国家标准正式立项，涉及密码、零信任等领域；Okta紧急修复重大安全漏洞，或导致长用户名账户被入侵 | 牛览 日期：2024年11月0

问卷调研 | （2024年）我国企业Web安全风险态势及防护现状 日期：2024年11月05日 阅：44

赛宁网安：回归用户需求，开创实用型靶场新范式

随着就业市场的紧张以及不断变化的网络威胁环境，网络安全人员配备不足的问题日益严峻，给组织带来了重大风险。那么，人工智能是否能为防御者带来帮助呢？

Private PKI (Public Key Infrastructure) is critical for trusted authentication and secure communication among internal applications, devices, workloads, machines, and services. While most organizations understand its importance, managing it effectively is still a struggle for many. Traditionally, organizations manage private PKI on-premises for greater control, security, and customization. However, as new use cases emerge and […]

The post Why PKIaaS is a Smarter and Secure Alternative to On-Premises PKI appeared first on Security Boulevard.

基于大模型的软件智能化开发实践 by ourren

基于协议指纹和累积有效载荷长度样本的Tor-Snowflake流量识别框架 by ourren

HTTPT：一种抵御主动探测攻击的代理方法 by ourren

SecWiki周刊（第557期) by ourren

第八届强网杯全国网络安全挑战赛 WriteUp by ourren

更多最新文章，请访问SecWiki

A vulnerability was found in Apache HTTP Server 2.x. It has been rated as problematic. Affected by this issue is the function char_buffer_read of the component mod_ssl. The manipulation leads to improper null termination. This vulnerability is handled as CVE-2004-0751. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in Dspicture Light Imaging Toolkit 4.7.1. This affects an unknown part of the file gdpicture4s.ocx of the component ActiveX Control. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2008-4453. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in MySQL Quick Admin up to 1.5.5 and classified as critical. This issue affects some unknown processing of the file index.php. The manipulation leads to path traversal. The identification of this vulnerability is CVE-2008-4455. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in QuidaScript BookMarks Favourites Script. It has been classified as critical. This affects an unknown part of the file view_group.php. The manipulation of the argument id leads to sql injection. This vulnerability is uniquely identified as CVE-2008-6007. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in Hardkap Pritlog 0.2/0.3/0.4. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument filename leads to path traversal. This vulnerability is handled as CVE-2008-6012. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Rianxosencabos CMS 0.9 and classified as critical. This vulnerability affects unknown code. The manipulation of the argument id leads to sql injection. This vulnerability was named CVE-2008-6014. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in eFront up to 3.5.1. This affects an unknown part of the file filesystem3.class.php of the component File Upload. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2008-7026. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in SG Real Estate Portal 2.0. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authentication. The identification of this vulnerability is CVE-2008-6009. The attack may be initiated remotely. Furthermore, there is an exploit available.

阿里云先知灯塔系列城市安全沙龙第六场-北京站将于11月8日至11月9日在北京北邮科技大厦举办。11月9日上午场是天地一体化网络安全技术前沿论坛，下午场是先知安全沙龙北京站议题分享。