Aggregator

A vulnerability classified as problematic was found in Gohigheris Com Jwhmcs 1.5.0. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument controller leads to path traversal. This vulnerability is known as CVE-2010-1977. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Joomlart Com Javoice 2.0. It has been classified as problematic. Affected is an unknown function of the file index.php. The manipulation of the argument view leads to path traversal. This vulnerability is traded as CVE-2010-1982. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic has been found in Joomlamart Com Jacomment. Affected is an unknown function of the file index.php. The manipulation of the argument view leads to path traversal. This vulnerability is traded as CVE-2010-1601. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in Thethinkery Com Iproperty 1.5.3. This issue affects some unknown processing of the file index.php. The manipulation of the argument ID leads to sql injection. The identification of this vulnerability is CVE-2010-1721. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Joomlacomponent.inetlanka Com Multimap 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file index.php of the component IMAP. The manipulation of the argument controller leads to path traversal. This vulnerability is known as CVE-2010-1953. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in Joomlacomponent.inetlanka Com Drawroot 1.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument controller leads to path traversal. This vulnerability is known as CVE-2010-1723. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Joomlacomponent.inetlanka Com Multiroot 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument controller leads to path traversal. This vulnerability is handled as CVE-2010-1954. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in iJoomla Com Magazine 3.0.1. This affects an unknown part of the file magazine.functions.php. The manipulation of the argument config leads to code injection. This vulnerability is uniquely identified as CVE-2010-4918. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A sophisticated malware-as-a-service operation orchestrated by Chinese-speaking threat actors has successfully compromised over 11,000 Android devices worldwide through the deployment of PlayPraetor, a powerful Remote Access Trojan designed for on-device fraud. The campaign represents a significant escalation in mobile banking malware operations, with the botnet expanding at an alarming rate of over 2,000 new infections […]

The post 11,000 Android Devices Hacked by Chinese Threats Actors to Deploy PlayPraetor Malware appeared first on Cyber Security News.

Currently trending CVE - Hype Score: 1 - CodeIgniter is a PHP full-stack web framework. A command injection vulnerability present in versions prior to 4.6.2 affects applications that use the ImageMagick handler for image processing (`imagick` as the image library) and either allow file uploads with user-controlled ...

文章指出企业在开源治理中面临挑战，尽管意识到漏洞问题但缺乏有效管理。通过对常见易受攻击组件的分析，揭示了系统性治理盲点。

A vulnerability was found in Oracle Reports Developer 12.2.1.3. It has been classified as problematic. Affected is an unknown function of the component OpenSSL. The manipulation leads to improper access controls. This vulnerability is traded as CVE-2019-2413. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Heidelberg Prinect Archiver 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting (Reflected). This vulnerability is handled as CVE-2019-10685. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Oracle Hyperion Planning 11.1.2.4. It has been rated as critical. Affected by this issue is some unknown functionality of the component Security. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2019-2861. The attack may be launched remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Nelson Open Source ERP 6.3.1. It has been classified as critical. Affected is an unknown function of the file db/utils/query/data.xml. The manipulation of the argument Query as part of Parameter leads to sql injection. This vulnerability is traded as CVE-2019-5893. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, was found in Nimble Streamer up to 3.0.4-9 on WordPress. This affects an unknown part. The manipulation with the input ../ leads to path traversal. This vulnerability is uniquely identified as CVE-2019-11013. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

银狐黑产组织相关攻击技术汇总

The use on online tracking tools on the health-related websites and apps of HIPAA and non-HIPAA regulated entities continues to be a lightning rod due to a long list of ongoing data privacy, regulatory and legal concerns, said partner and attorney Elizabeth Hodge of the law firm Akerman.

Red-Hot Startup Noma Security to Deepen Protection for AI Models and Agents
With agentic AI deployments accelerating, Noma Security’s $100 million Series B will fuel development of risk management and runtime protection features. CEO Niv Braun said demand for securing agentic AI has surged among Fortune 500 firms and healthcare and financial institutions.

US Alleged Illumina 'Knowingly' Sold Feds Systems Containing Vulnerabilities
Genomics sequencing firm Illumina Inc. has agreed to pay $9.8 million to resolve False Claims Act whistleblower allegations that it sold software and systems containing cybersecurity vulnerabilities over more than seven years to government agencies.