Lucene search
K

2068 matches found

Wallarm Lab
Wallarm Lab
added 2024/02/08 11:19 a.m.35 views

avro vs protobuf

A Kickoff Discussion on Core Aspects of Avro & Protobuf When deliberating on the subject of data structure encoding, a tandem of tools frequently emerges in technical discussions: Avro and Protobuf. Originating from a vision of precise data compression, the distinguishable features and applicatio...

6.9AI score
Exploits0
Qualys Blog
Qualys Blog
added 2024/01/29 5:1 p.m.14 views

Cybersecurity Must De-Risk the Business

The Catalyst for My Return to Qualys “Necessity is the mother of all invention.” – Plato Introduction Cybersecurity as a problem and practice is evolving. This evolution is driven by business risk. Does this sound obvious? For far too long, we in security have put the technology cart way ahead of...

7.3AI score
Exploits0
Wallarm Lab
Wallarm Lab
added 2024/01/22 1:30 p.m.21 views

The Future of Cybersecurity

Pioneering the Forward-Thinking Epoch of Internet Safety As we brace for an era anticipated to offer a deeper entwined digital landscape, a profound transformation stirs within the realms of online safety. As we are safeguarding not just personal computers or mobile devices, but also other...

6.8AI score
Exploits0
hivepro
hivepro
added 2024/01/03 9:15 a.m.19 views

Kimsuky Group’s Intriguing Exploits with AppleSeed Malware

Summary: The Kimsuky group has been actively utilizing weaponized LNK files to deploy the AppleSeed malware. While the group typically relies on spear-phishing attacks for initial access, their recent campaigns have prominently featured the use of shortcut-type malware in LNK file format. AppleSe...

7.2AI score
Exploits0
HackRead
HackRead
added 2024/01/02 5:17 p.m.16 views

Navigating the Complex World of Capital Markets with Technology

By Owais Sultan The world of capital markets has changed dramatically over the past few years. Today, most transactions are conducted… This is a post from HackRead.com Read the original post: Navigating the Complex World of Capital Markets with Technology...

7.3AI score
Exploits0
hivepro
hivepro
added 2023/12/21 5:44 a.m.21 views

PikaBot Malware Unleashes Threat via Malvertising

Summary: PikaBot, a recently identified malware family, has become a prominent threat in malvertising campaigns, particularly through search engine ads. Associated with the TA577 threat actor and linked to ransomware distribution, PikaBot employs advanced tactics, such as decoy websites and...

7.2AI score
Exploits0
Imperva Blog
Imperva Blog
added 2023/12/07 2:11 p.m.20 views

2024 Predictions for Cybersecurity: The Rise of AI Brings New Challenges

The emergence of generative AI has put new resources in the hands of both attackers and defenders, and in 2024, Imperva believes the technology will have an even greater impact. Understanding how attackers are leveraging the technology will be critical for organizations seeking to keep...

7.2AI score
Exploits0
Securelist
Securelist
added 2023/12/01 10:0 a.m.62 views

IT threat evolution in Q3 2023. Non-mobile statistics

IT threat evolution in Q3 2023 IT threat evolution in Q3 2023. Non-mobile statistics IT threat evolution in Q3 2023. Mobile statistics These statistics are based on detection verdicts of Kaspersky products and services received from users who consented to providing statistical data. Quarterly...

9.3CVSS9.3AI score0.99999EPSS
Exploits520
Wired Threat Level
Wired Threat Level
added 2023/11/24 12:0 p.m.21 views

Go on a Psychedelic Journey of the Internet's Growth and Evolution

Security researcher Barrett Lyon, who makes visualizations of the internet's network infrastructure, is back with a new piece chronicling the rise of the IPv6 protocol...

7.3AI score
Exploits0
Trellix
Trellix
added 2023/11/21 12:0 a.m.24 views

The Continued Evolution of the DarkGate Malware-as-a-Service

The Continued Evolution of the DarkGate Malware-as-a-Service By Ernesto Fernández Provecho, Pham Duy Phuc, Ciana Driscoll and Vinoo Thomas · November 21, 2023 On September 2023, the Trellix Security Operations Center SOC successfully detected and stopped an attack against Musarubra, the holding...

7.6AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.24 views

Rocky Linux 8 : evolution (RLSA-2021:1752)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1752 advisory. - In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid e.g., minimal...

5.9CVSS6.9AI score0.02133EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.25 views

Rocky Linux 8 : evolution (RLSA-2020:4649)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:4649 advisory. - evolution-data-server eds through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a begin TLS response, eds reads...

5.9CVSS6.9AI score0.02607EPSS
Exploits1References6
CNVD
CNVD
added 2023/10/23 12:0 a.m.15 views

Evolution CMS Cross-Site Scripting Vulnerability (CNVD-2023-85602)

Evolution CMS is an open source PHP-based content management system CMS. Evolution CMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the uid parameter, which can be exploited by an attacker to execute...

6.1CVSS6.4AI score0.00588EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2023/10/20 12:30 a.m.21 views

Evolution CMS Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters...

5.2CVSS6.5AI score0.00471EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2023/10/20 12:30 a.m.10 views

GHSA-432F-967F-VXG4 Evolution CMS Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters...

5.2CVSS5.2AI score0.00471EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2023/10/20 12:30 a.m.24 views

Evolution CMS Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter...

6.1CVSS6.5AI score0.00588EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2023/10/20 12:30 a.m.24 views

GHSA-5H47-9RM5-FX3F Evolution CMS Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter...

6.1CVSS6AI score0.00588EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2023/10/19 11:15 p.m.2 views

CVE-2023-43340

Cross-site scripting XSS vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters...

5.2CVSS6.1AI score0.00471EPSS
Exploits1References3
OSV
OSV
added 2023/10/19 11:15 p.m.16 views

CVE-2023-43340

Cross-site scripting XSS vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters...

5.2CVSS6.4AI score0.00471EPSS
Exploits1References2
NVD
NVD
added 2023/10/19 11:15 p.m.25 views

CVE-2023-43340

Cross-site scripting XSS vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters...

5.2CVSS5.2AI score0.00471EPSS
Exploits1References2
Rows per page
Query Builder