Aggregator

JSP3/2.0.14

Discover why Escape is a better DAST solution for API testing.

The post Escape vs Qualys appeared first on Security Boulevard.

A vulnerability was found in Adobe Acrobat Reader up to 11.0.15/15.006. It has been classified as critical. This affects an unknown part. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2016-1086. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Apple Mac OS X 10.4.9. Affected is an unknown function of the component gm4. The manipulation leads to format string. This vulnerability is traded as CVE-2001-1411. Local access is required to approach this attack. There is no exploit available.

主站 分类 漏洞 工具 极客

For the latest discoveries in cyber research for the week of 21st October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Boston Children’s Health Physicians, part of the Boston Children’s Hospital network, suffered a data breach in September, exposing sensitive patient information, including Social Security numbers, medical records, and health insurance details. The […]

The post 21st October – Threat Intelligence Report appeared first on Check Point Research.

Новый арсенал группы плетёт сеть кибершпионажа в Восточной Европе.

福建省唯一入围企业！国投智能入选“2024年中国网络安全前二十家企业”名单 日期：2024年10月21日 阅：76

Libreboot 是基于 coreboot 的自由软件固件项目，旨在取代私有的 BIOS 或 UEFI 固件。但从 2022 年起它开始包含非自由代码，为了维护真正的自由，GNU Boot 在 Libreboot 基础上诞生了。然而要在固件领域确保 100% 自由代码是非常困难的。GNU Boot 去年 12 月发现其项目包含了不符合自由软件标准的非自由文件，现在它再次发生包含非自由代码。问题归因于存档中的测试数据，包含了微码、BIOS 和英特尔 Management Engine 固件形式的非自由代码。

A vulnerability classified as critical was found in DeluxeBB 1.1/1.2. Affected by this vulnerability is an unknown functionality of the file forums.php. The manipulation of the argument sort leads to sql injection. This vulnerability is known as CVE-2008-2194. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in ScriptsEZ Power Editor 2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file editor.php. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2008-2115. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in ScriptsEZ Power Editor 2.0. It has been classified as problematic. This affects an unknown part of the file editor.php. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2008-2116. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.

A vulnerability has been found in Miniweb2 Blog Writer 2.0 and classified as critical. This vulnerability affects unknown code of the file index.php. The manipulation of the argument historymonth leads to sql injection. This vulnerability was named CVE-2008-2197. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Novell eDirectory 8.7.3.9/8.8.2. It has been rated as problematic. This issue affects some unknown processing of the file dhost.exe. The manipulation leads to improper resource management. The identification of this vulnerability is CVE-2008-0927. The attack may be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

JSP3/2.0.14

主站 分类 漏洞 工具 极客

A vulnerability was found in BackLinkSpider Backlink Spider. It has been classified as critical. This affects an unknown part of the file link.php. The manipulation of the argument cat_id leads to sql injection. This vulnerability is uniquely identified as CVE-2008-2096. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in AnServ Auction XL and classified as critical. Affected by this issue is some unknown functionality of the file viewfaqs.php. The manipulation of the argument cat leads to sql injection. This vulnerability is handled as CVE-2008-2189. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Romedchim International Srl Online Rent Property Script up to 4.5. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument pid leads to sql injection. This vulnerability is uniquely identified as CVE-2008-2190. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.