Aggregator

​​​​Microsoft has shared a workaround for a known issue affecting Microsoft 365 customers and causing classic Outlook to crash after opening or when starting up in Safe mode. [...]

A vulnerability was found in pkp ojs up to 3.4.0-6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login/signOut. The manipulation of the argument source with the input .example.com leads to open redirect. This vulnerability is handled as CVE-2024-7902. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Chris Lindsey shares his takeaways from another exciting Black Hat conference

The post Black Hat 2024: AI, AI, and Everything Else appeared first on Security Boulevard.

The prospect of obtaining premium features without spending a dime is tempting. Nulled WordPress plu

A vulnerability has been found in Scada-LTS 2.7.8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Scada-LTS/app.shtm#/alarms/Scada of the component Message Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-7901. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

java之sql注入代码审计

XSS之Flash弹窗钓鱼和文件上传getshell各种姿势

house of banana

安全开发01：fscan源码解析-上

某护网中的小程序渗透

安全开发02：fscan源码解析-下

jdk21下的jndi注入

ASP.NET下Webshell编译产物免杀

终端PC Web安全 PartA

泛微云桥e-Bridge任意文件上传漏洞分析

亿赛通电子文档安全管理系统SQL注入漏洞 代码分析

Solon内存马研究

从一道pwn题深入理解exp的编写

记录一次 Android 服务端的证书校验的详细过程

针对LOL玩家的最新钓鱼活动剖析-大量国内玩家受控