CISA: Emergency Response Planning Guidelines

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: FEMA Chemical, Biological, Radiological, and Nuclear (CBRN) Response and Recovery Efforts

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Federal Emergency Management Agency (FEMA) Response: Hurricanes, Wildfires, Floods, and Pandemics

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Active Shooter Attacks Action Guide

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Bomb Threat Checklist

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Active Shooter: How to Respond Booklet - Spanish Translation

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Dow Incident and Crisis Management

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

Securing Success: Stories from the SOC Webinar Series

In today’s fast-paced threat landscape, SOC Security Operations Center teams are under relentless pressure. Cyberattacks are evolving, threat volumes are skyrocketing, and attackers are exploiting vulnerabilities faster than ever. To navigate these challenges, Rapid7 has launched the "Securing...

Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection

Threat actors are attempting to take advantage of a recently disclosed security flaw impacting GFI KerioControl firewalls that, if successfully exploited, could allow malicious actors to achieve remote code execution RCE. The vulnerability in question, CVE-2024-52875 , refers to a carriage return...

CVE-2024-13203

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did...

CVE-2024-13200

A vulnerability, which was classified as critical, was found in wander-chu SpringBoot-Blog 1.0. This affects the function preHandle of the file src/main/java/com/my/blog/website/interceptor/BaseInterceptor.java of the component HTTP POST Request Handler. The manipulation leads to improper access...

CVE-2024-13203

CVE-2024-13203 concerns the kurniaramadhan E-Commerce-PHP 1.0 application. The publicly provided records indicate a vulnerability in an unspecified function that enables cross-site request forgery (CSRF) and can be triggered remotely. The exact vulnerable component, affected versions beyond 1.0, ...

CVE-2024-13201

CVE-2024-13201 affects wander-chu SpringBoot-Blog 1.0 in the Admin Attachment Handler, specifically the upload function in AttachtController.java. The root cause is manipulation of the file argument, enabling unrestricted uploads. Exploitation can be remote, and public disclosures exist. Several ...

CVE-2024-13198

A vulnerability classified as problematic has been found in langhsu Mblog Blog System 3.5.0. Affected is an unknown function of the file /login. The manipulation leads to observable response discrepancy. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

CVE-2024-13198

CVE-2024-13198 affects langhsu Mblog Blog System 3.5.0. The vulnerability is in an unknown function of the file /login , causing an observable response discrepancy. It can be exploited remotely, with attack complexity described as high. Exploit has been disclosed publicly. Vendor response to disc...

CVE-2024-13198 langhsu Mblog Blog System login observable response discrepancy

A vulnerability classified as problematic has been found in langhsu Mblog Blog System 3.5.0. Affected is an unknown function of the file /login. The manipulation leads to observable response discrepancy. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

CVE-2024-13198 langhsu Mblog Blog System login observable response discrepancy

A vulnerability classified as problematic has been found in langhsu Mblog Blog System 3.5.0. Affected is an unknown function of the file /login. The manipulation leads to observable response discrepancy. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

mblog 安全漏洞

mblog is a blogging system by langhsu individual developer. A security vulnerability exists in mblog version 3.5.0, which stems from an unknown feature of file/login that causes significant response differences...

CVE-2024-13193

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMSImages.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The...

CVE-2024-13188

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permissions. The attack...