Aggregator

Submit #441916 / VDB-285501

Submit #441914 / VDB-285500

Submit #441913 / VDB-285499

A vulnerability classified as problematic has been found in Rakuten Mobile Rakuten Turbo 5G up to 1.3.18. Affected is an unknown function. The manipulation leads to exposure of sensitive system information to an unauthorized control sphere. This vulnerability is traded as CVE-2024-52033. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Rakuten Mobile Rakuten Turbo 5G up to 1.3.18. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to os command injection. The identification of this vulnerability is CVE-2024-48895. The attack may be initiated remotely. There is no exploit available.

A vulnerability was found in Rakuten Mobile Rakuten Turbo 5G up to 1.3.18. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to missing authentication. This vulnerability was named CVE-2024-47865. The attack can be initiated remotely. There is no exploit available.

世界互联网大会｜美创数据认知与分类分级系统（AICogniSort）重磅发布！

法国和德国也有外包网络安全的倾向，但程度较轻。

Recent backdoor implants and cyber-espionage attacks on their supply chains have African organizations looking to diversify beyond Chinese, American tech vendors.

你可能错过的新鲜事Google Play 2024 年度最佳榜单公布11 月 18 日，Google Play 2024 年度最佳榜单正式公布，榜单涵盖应用、游戏和图书三大类别，其中年度最佳应用为

微软旗下的热门沙盒游戏《我的世界（Minecraft）》与欧洲最大主题公园运营商 Merlin Entertainments 签署协议，将率先在英国和美国开设主题游乐设施、景点、酒店客房和零售点。Merlin 的规模仅次于迪士尼，在 23 个国家运营逾 135 个景点，包括奥尔顿塔、乐高乐园、海洋生物公园、杜莎夫人蜡像馆和伦敦眼。前两个景点 Merlin 将投资逾 1.1 亿美元，将于 2026 年和 2027 年分别在英国和美国开业，景点要么位于现有主题公园内，要么作为新的市中心景点。两家公司未来计划扩大到其他国家和地区。《我的世界》是史上最畅销游戏之一，每月有 1.4 亿玩家。

Неочевидная лазейка пугает своей простотой.

苹果最新的移动操作系统iOS 18似乎增加了一项未经记录的安全功能，如果设备在72小时内未使用，则会重新启动设备。这对任何试图在没有有效密码的情况下使用iOS设备的人都会产生影响，比如手机被盗或者被扣押。无有效密码访问数据难度叠加当iPhone 重新启动时，它会进入一个称为“首次解锁前”（ BFU ）的状态，在此期间，它所包含的文件将被加密。一旦使用密码解锁，它的状态将变为首次解锁后（AFU）。此

Threat actors exploit misconfigured JupyterLab and Jupyter Notebooks servers to rip sports streams and illegally redistribute them. Researchers from security firm Aqua observed threat actors exploiting misconfigured JupyterLab and Jupyter Notebook servers to hijack environments, deploy streaming tools, and duplicate live sports broadcasts on illegal platforms. “threat actors using misconfigured servers to hijack environments for […]

A vulnerability was found in PyMOL 2.5.0. It has been declared as critical. This vulnerability affects unknown code of the component PYM File Handler. The manipulation leads to improper authorization. This vulnerability was named CVE-2024-50636. The attack can be initiated remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Microsoft Windows Server 2022. This issue affects some unknown processing of the component SMBv3 Server. The manipulation leads to double free. The identification of this vulnerability is CVE-2024-43447. The attack may be initiated remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, was found in Microsoft Windows. Affected is an unknown function of the component USB Video Class System Driver. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-43449. It is possible to launch the attack on the physical device. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Microsoft Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component DNS. The manipulation leads to improper enforcement of message integrity. This vulnerability is known as CVE-2024-43450. The attack can be launched remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Microsoft Windows. It has been classified as critical. This affects an unknown part of the component Registry. The manipulation leads to time-of-check time-of-use. This vulnerability is uniquely identified as CVE-2024-43452. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.