Aggregator

Как один человек посеял панику по всей стране.

A vulnerability was found in Linux Kernel up to 4.18. It has been declared as problematic. This vulnerability affects the function tcp_retransmit_timer of the component TCP Handler. The manipulation leads to resource consumption. This vulnerability was named CVE-2024-41007. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.9.9. Affected by this issue is the function usb_string_copy of the component configfs. The manipulation leads to out-of-bounds write. This vulnerability is handled as CVE-2024-42236. The attack can only be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.9.6 and classified as critical. This issue affects the function fib6_nh_init. The manipulation leads to null pointer dereference. The identification of this vulnerability is CVE-2024-40961. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.9.8. Affected by this issue is some unknown functionality of the component tda10048. The manipulation leads to integer overflow. This vulnerability is handled as CVE-2024-42223. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.9.6. This affects an unknown part of the component ACPICA. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2024-40984. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

The threat actor known as Storm-0501 has targeted government, manufacturing, transportation, and law enforcement sectors in the U.S. to stage ransomware attacks. The multi-stage attack campaign is designed to compromise hybrid cloud environments and perform lateral movement from on-premises to cloud environment, ultimately resulting in data exfiltration, credential theft, tampering, persistent

In de eerste 8 maanden van dit jaar zijn 6.283 nieuwe medewerkers ingestroomd bij Defensie. Het gaat om 2.702 militairen, 1.087 reservisten en 2.494 burgers. Dat blijkt uit de managementrapportage over personeel door TOS (Trends, Onderzoek en Statistiek).

初探QEMU虚拟化逃逸技术与漏洞利用

某厂商安全Android加固之so层检测初步分析

Aria2&Cloudreve&任意文件写入到RCE

Apache Wicket 爆出的XSLT 代码执行漏洞

WildFly内存马 构造分析过程

websphere内存马 构造分析过程

Java各种反序列化调用链、代码审计等大赛题目手法详细学习汇总

2024 ByteCTF ezobj&OnlyBypassMe WriteUp

模糊测试 ASan 模式下有关堆的 ASan Redzone 和 Check 的源码解析

从search入手的jndi注入技术学习

house of force进阶利用--结合tcache头污染

pwn-ret2mprotect全解