Aggregator

A vulnerability, which was classified as problematic, has been found in Umbraco CMS up to 8.18.14/10.8.6/13.5.1. Affected by this issue is some unknown functionality. The manipulation leads to session expiration. This vulnerability is handled as CVE-2024-48926. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in No Fuss Computing Centurion ERP up to 1.2.0. Affected by this vulnerability is an unknown functionality of the component Project Handler. The manipulation leads to improper isolation or compartmentalization. This vulnerability is known as CVE-2024-49373. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Umbraco CMS up to 10.8.6/13.5.1. Affected is an unknown function of the component Sign-Out. The manipulation leads to session fixiation. This vulnerability is traded as CVE-2024-48929. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Umbraco CMS up to 14.2.x. It has been rated as critical. This issue affects some unknown processing of the component Webhook API. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2024-48925. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Collabtive 3.1. It has been declared as problematic. This vulnerability affects unknown code of the file tasklist.php. The manipulation of the argument name leads to cross site scripting. This vulnerability was named CVE-2024-48708. The attack can be initiated remotely. There is no exploit available.

A vulnerability was found in Collabtive 3.1. It has been classified as problematic. This affects an unknown part of the file managemilestone.php. The manipulation of the argument name leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-48707. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in Collabtive 3.1 and classified as problematic. Affected by this issue is some unknown functionality of the file managemessage.php. The manipulation of the argument title leads to cross site scripting. This vulnerability is handled as CVE-2024-48706. The attack may be launched remotely. There is no exploit available.

A vulnerability has been found in Client Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bwdates-reports-ds.php. The manipulation of the argument Between Dates Reports leads to sql injection. This vulnerability is known as CVE-2024-48570. The attack can be launched remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in Umbraco CMS up to 8.18.14/10.8.6/13.5.1. Affected is an unknown function of the component SVG File Preview. The manipulation leads to injection. This vulnerability is traded as CVE-2024-48927. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

Russian-speaking users have become the target of a new phishing campaign that leverages an open-source phishing toolkit called Gophish to deliver DarkCrystal RAT (aka DCRat) and a previously undocumented remote access trojan dubbed PowerRAT. "The campaign involves modular infection chains that are either Maldoc or HTML-based infections and require the victim's intervention to trigger the

A vulnerability, which was classified as critical, has been found in Python CPython up to 3.13.0. This issue affects some unknown processing of the file /venv/bin/python of the component venv. The manipulation leads to unquoted search path. The identification of this vulnerability is CVE-2024-9287. The attack needs to be approached locally. There is no exploit available.

Гидроцилиндр, как символ нового этапа в развитии инженерных технологий.

Socket Plans to Triple Headcount After Big Growth, Deliver Open-Source Tools Faster
A $40 million Series B investment will support Socket in rapidly scaling its team and product development. Following a 400% revenue increase, the company plans to build on its success by expanding its application security offerings and enterprise support for more programming languages.

Authors/Presenters:Minghao Li, Ran Ben Basat, Shay Vargaftik, ChonLam Lao, Kevin Xu, Michael Mitzenmacher, Minlan Yu

Our sincere thanks to USENIX, and the Presenters & Authors for publishing their superb 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI '24) content, placing the organizations enduring commitment to Open Access front and center. Originating from the conference’s events situated at the Hyatt Regency Santa Clara; and via the organizations YouTube channel.

Permalink

The post USENIX NSDI ’24 – THC: Accelerating Distributed Deep Learning Using Tensor Homomorphic Compression appeared first on Security Boulevard.

via the comic humor & dry wit of Randall Munroe, creator of XKCD

Permalink

The post Randall Munroe’s XKCD ‘Temperature Scales’ appeared first on Security Boulevard.

GoDaddy flagged a ClickFix campaign that infected 6,000 sites in a one-day period, with attackers using stolen admin credentials to distribute malware.

Крупная утечка обнажила всю поднаготную когнитивной войны между странами.

360漏洞云作为安全领域唯一的社群合作伙伴参与大会