Aggregator

Новый инструмент работает по 3D-карте Земли без привязки к GPS.

VMware vDefend’s GenAI co-pilot innovation speeds up ransomware threat defense with context-driven explainability of the attack chain, correlated threat campaign insights, and guided remediation. There’s a lot of euphoria around generative AI/GenAI today, not just among enterprises but also among threat actors wanting to cast a wider net for ransom. As these technologies evolve, they … Continued

The post Introducing Intelligent Assist for VMware vDefend: Turbocharge Threat Defense with GenAI-Driven Intelligence appeared first on VMware Security Blog.

最近cby和我聊天愈发多起来，各种乱七八糟的话题，都不是刻意找来聊，单纯觉得某件事值得一说，说者得意，听者有趣。她会说她的见闻，我会说我的周遭。cby看完中文版《爱丽丝漫游奇境记》，觉得许多处英文谐音

Submit #436999 / VDB-283090

Submit #436969 / VDB-283089

洛杉矶县起诉了最大的两家饮料巨头可口可乐和百事可乐，称两家公司在塑料瓶回收上向公众撒谎，导致居民和生态系统受困于塑料污染。目前全世界只有 9% 的塑料被回收利用，其余或者被焚烧、送往垃圾填埋场，或丢弃在地上，被冲入河流或海洋。与此同时，微塑料日益成为一个严重的健康和环境问题，微塑料是随着产品老化、使用或清洗而掉落的降解塑料碎片。洛杉矶县称，可口可乐和百事可乐是世界最大的两家塑料污染制造者。

A vulnerability, which was classified as problematic, has been found in romadebrian WEB-Sekolah 1.0. Affected by this issue is some unknown functionality of the file /Admin/Proses_Edit_Akun.php of the component Backend. The manipulation of the argument Username_Baru/Password leads to cross site scripting. This vulnerability is handled as CVE-2024-10842. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. Affected by this vulnerability is an unknown functionality of the file /Proses_Kirim.php of the component Mail Handler. The manipulation of the argument Name leads to sql injection. This vulnerability is known as CVE-2024-10841. The attack can be launched remotely. Furthermore, there is an exploit available. Other parameters might be affected as well.

A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function of the file /Admin/akun_edit.php of the component Backend. The manipulation of the argument kode leads to cross site scripting. This vulnerability is traded as CVE-2024-10840. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in MangoOS up to 5.1.3 and classified as critical. This issue affects some unknown processing of the component API. The manipulation leads to unrestricted upload. The identification of this vulnerability is CVE-2024-37847. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in gaizhenbiao ChuanhuChatGPT 20240305/20240310/20240410 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to resource consumption. This vulnerability is handled as CVE-2024-7807. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in http.zig 76cf5. This affects an unknown part of the component Parameter Handler. The manipulation of the argument url leads to injection. This vulnerability is uniquely identified as CVE-2023-52066. The attack needs to be initiated within the local network. There is no exploit available.

A vulnerability was found in SAS Studio 9.4. It has been classified as critical. This affects an unknown part of the file /SASStudio/sasexec/sessions/{sessionID}/sql of the component POST Body Handler. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2024-48733. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in SAS Studio 9.4. It has been declared as critical. This vulnerability affects unknown code of the file /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath}. The manipulation leads to unrestricted upload. This vulnerability was named CVE-2024-48734. The attack can be initiated remotely. There is no exploit available.