Aggregator

Submit #397718 / VDB-275768

Куда на самом деле попадают носители информации после изъятия.

A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /forget.php. The manipulation of the argument email/mobile leads to sql injection. This vulnerability is traded as CVE-2024-8167. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

Submit #397717 / VDB-165082

A vulnerability was found in Linux Kernel and classified as critical. This issue affects the function pair_device of the component Bluetooth. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2024-43884. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

Submit #397716 / VDB-274058

Submit #397715 / VDB-275767

Submit #397714 / VDB-275766

A vulnerability has been found in Ruijie EG2000K 11.1(6)B2 and classified as critical. This vulnerability affects unknown code of the file /tool/index.php?c=download&a=save. The manipulation of the argument content leads to unrestricted upload. This vulnerability was named CVE-2024-8166. The attack can be initiated remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as problematic, was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This affects the function exportZip of the file /admin/file_manager/export. The manipulation of the argument path leads to path traversal. This vulnerability is uniquely identified as CVE-2024-8165. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as critical, has been found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function rename of the file /Admin/Http/Controllers/FileManagerController.php. The manipulation of the argument new_name leads to unrestricted upload. This vulnerability is handled as CVE-2024-8164. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as critical was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this vulnerability is the function destroyFiles of the file /admin/file_manager/files. The manipulation of the argument files leads to path traversal. This vulnerability is known as CVE-2024-8163. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

2024年8月23日，darkwebinformer报道称，一名代号为“USDoD”的巴西黑客被认定为美国历史上最大的数据泄露事件的主谋。

在捷克共和国、匈牙利和格鲁吉亚的金融欺诈活动中，最近发现了一种复杂的移动网络钓鱼技术。

本期CNCERT国家工程研究中心安全资讯周报共收录安全资讯28篇。点击文章，快速阅读最新资讯。

Submit #393750 / VDB-275764

A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207. Affected is an unknown function of the file /squashfs-root/web_cste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to hard-coded credentials. This vulnerability is traded as CVE-2024-8162. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #393376 / VDB-275763

Submit #393375 / VDB-275762

Submit #393374 / VDB-275761