Aggregator

Trend Micro Deep Security权限提升漏洞

国家信息安全漏洞共享平台（以下简称CNVD）本周共收集、整理信息安全漏洞272个，其中高危漏洞151个、中危漏洞106个、低危漏洞15个。

Янн ЛеКун разочаровал технооптимистов своими прогнозами.

Microsoft is warning of Windows crashing with the blue screen of death on some ASUS laptop models when trying to upgrade to the latest version of the operating system, Windows 11 version 24H2. [...]

Avevo appena segnalato l'aggiornamento al Piracy Shield, di cui avevo perso anche la prima versione,

小米公司成功流片国内首款 3nm 手机系统级芯片10 月 20 日消息，据北京卫视消息，北京市经济和信息化局总经济师唐建国表示，小米公司成功流片国内首款 3nm 手机系统级芯片。所谓流片，就是像流水线

盛邦安全

This article is the result of a collaboration with Josimar. You can find Josimar’s c

盛邦安全

A vulnerability was found in cryptocoinjs secp256k1-node up to 3.8.0/4.0.3/5.0.0 and classified as problematic. Affected by this issue is the function publicKeyVerify. The manipulation leads to improper validation of integrity check value. This vulnerability is handled as CVE-2024-48930. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Editor’s note: The cur

A vulnerability has been found in OneDev up to 11.0.8 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to information disclosure. This vulnerability is known as CVE-2024-45309. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in MongoDB Server up to 6.0.16/7.0.12/7.3.3. Affected is an unknown function of the component prepareUnique Index Handler. The manipulation leads to improper validation of consistency within input. This vulnerability is traded as CVE-2024-8305. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

The cryptographic vulnerabilities were found in Sync, pCloud, Icedrive and Seafile by ETH Zurich

云科安信与白山云科技签署战略合作协议，携手共建数字安全未来。

调查显示，四分之三的 CISO 被大量工具发出的威胁检测所淹没，但仍然缺乏识别出真正影响业务的漏洞。

利用WinRAR工具构造钓鱼文件 by 洞源实验室

更多最新文章，请访问SecWiki

埃及已被世界卫生组织（WHO）认证为无疟疾国家，被认为具有“真正的历史性成就”。WHO 总干事谭德塞表示，疟疾与埃及文明一样古老，困扰法老的疾病现在变成了埃及历史的一部分。疟疾每年导致至少 60 万人死亡，几乎都在非洲，大部分是儿童。在 1940 年代埃及每年有 300 万疟疾感染者，1960 年代建造的 Aswan 水坝为蚊子繁殖提供了新的水体。到 2001 年疟疾在埃及已受到严格控制。埃及现在成为第 44 个获得认证的无疟疾国家。