Aggregator

CVE-2024-20540 | Cisco Unified Contact Center Management Portal up to 12.6(1)_ES13 Web-based Management Interface cross site scripting (cisco-sa-ccmp-sxss-qBTDBZDD)

Vuldb Updates
10 months 3 weeks ago
A vulnerability classified as problematic has been found in Cisco Unified Contact Center Management Portal. Affected is an unknown function of the component Web-based Management Interface. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-20540. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2021-34751 | Cisco Firepower Management Center sensitive information in gui (cisco-sa-fmc-infodisc-Ft2WVmNU)

Vuldb Updates
10 months 3 weeks ago
A vulnerability, which was classified as problematic, was found in Cisco Firepower Management Center. This affects an unknown part of the component Administrative Web-based GUI Configuration Manager. The manipulation leads to cleartext storage of sensitive information in gui. This vulnerability is uniquely identified as CVE-2021-34751. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2021-34753 | Cisco Firepower Threat Defense Software Ethernet Industrial Protocol access control (cisco-sa-ftd-enip-bypass-eFsxd8KP)

Vuldb Updates
10 months 3 weeks ago
A vulnerability was found in Cisco Firepower Threat Defense Software. It has been rated as critical. Affected by this issue is some unknown functionality of the component Ethernet Industrial Protocol. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2021-34753. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-8185 | HashiCorp Vault/Vault Enterprise up to 1.18.0 API Endpoint failing open (Nessus ID 210710)

Vuldb Updates
10 months 3 weeks ago
A vulnerability classified as critical has been found in HashiCorp Vault and Vault Enterprise up to 1.18.0. Affected is an unknown function of the component API Endpoint. The manipulation leads to not failing securely. This vulnerability is traded as CVE-2024-8185. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2024-20504 | Cisco Secure Email Web-based Management Interface cross site scripting (cisco-sa-esa-wsa-sma-xss-zYm3f49n / Nessus ID 210599)

Vuldb Updates
10 months 3 weeks ago
A vulnerability was found in Cisco Secure Email, Secure Email and Web Manager and Secure Web Appliance. It has been declared as problematic. This vulnerability affects unknown code of the component Web-based Management Interface. The manipulation leads to basic cross site scripting. This vulnerability was named CVE-2024-20504. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Sophisticated Kimsuky Campaign: New Malware Bypasses Windows Defender

Penetration Testing Tools - Metepreter.org
10 months 3 weeks ago

The Kimsuky group has once again found itself at the center of attention following a campaign that deftly combined social engineering tactics with sophisticated techniques for bypassing Windows security mechanisms. Their targets included South...

The post Sophisticated Kimsuky Campaign: New Malware Bypasses Windows Defender appeared first on Penetration Testing Tools.

ddos

科技爱好者周刊（第 360 期）：Dan Wang 的新书

不安全
10 months 3 weeks ago
本文是一份周刊类文章，记录每周值得分享的科技内容，并于每周五发布。内容涵盖科技新闻、工具资源、AI动态及观点分享等。其中包括Dan Wang的新书《冲：中国对未来的探索》，对比中美两国在工程与法律社会模式上的差异；冷冻胚胎诞生时间最久世界纪录；南非为犀牛角植入放射性物质防止偷猎；开源工具如Tinyauth、Hyprnote等；以及关于AI验证不对称性及编程教育的观点讨论。

史上最大规模GreedyBear攻击：650种黑客工具窃取百万美元资产

不安全
10 months 3 weeks ago
代号GreedyBear的网络犯罪组织近期通过650多种恶意工具窃取超百万美元加密货币。该组织采用工业化攻击模式，结合AI技术生成多样化载荷，并利用"扩展程序空心化"技术规避安全审查。其武器化扩展程序精确模仿主流钱包界面，截获用户凭据并传输至远程服务器。

TeamFiltration: enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Penetration Testing Tools - Metepreter.org
10 months 3 weeks ago

TeamFiltration TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts. See the Example Attack flow at the bottom of this readme for a general introduction into how TeamFiltration works! This tool has...

The post TeamFiltration: enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts appeared first on Penetration Testing Tools.

ddos

Lynx

Dark Feed IO
10 months 3 weeks ago

You must login to view this content

cohenido

UnitedHealth Group's Latest Health Data Breach Woes

DataBreachToday.com
10 months 3 weeks ago
Lawmakers Demand Answers From UHG Amid New Breach and Growing Fallout
When you've been the victim of the largest health data breach in U.S. history, and you've been under intense public and regulatory scrutiny for months, the last thing you want to do is to report another major breach less than a year after the last one. But that just happened to UnitedHealth Group.

Nvidia Pushes Back on Chinese 'Kill-Switch' Claims

DataBreachToday.com
10 months 3 weeks ago
Chipmaker Argues Against Growing Interest in US to Require New Security Measures
Artificial intelligence chip-making powerhouse Nvidia is rejecting claims from China’s top cyber agency that its H20 chips include location tracking and kill-switch features - while warning U.S. lawmakers against requiring those capabilities in future chip designs.

Managed ad