81 matches found
Concrete CMS Security Vulnerability
PortlandLabs Concrete CMS is an open source team-oriented content management system from PortlandLabs, Inc. A security vulnerability exists in Concrete CMS prior to version 9.2.3, which stems from a stored cross-site scripting attack via /dashboard/system/basics/name...
What is WAN Acceleration?
Hook: Network Sluggish? Learn What WAN Acceleration Is Ever been in a virtual meeting that froze at the worst possible moment? Or had your staff grumble about slow data transfers that are as slow as molasses? If your answer is a weary "yes," it's high time to turn your eyes toward WAN Acceleratio...
Secure Cloud Migration 101
Cloud migration is a journey, not a destination. Learn the basics of security for making the gradual switch, so you can get the most out of what the cloud has to offer...
Getting started with Open Policy Agent (OPA) to improve your cloud security
Learn Rego basics from Wiz to express policy as code for your cloud security...
Native Support in Spring Boot 3.0.0-M5
The Spring Team has been working on native image support for Spring Applications for quite some time. After 3+ years of incubation in the Spring Native experimental project with Spring Boot 2, native support is moving to General Availability with Spring Framework 6 and Spring Boot 3! Native image...
How to secure a Windows PC for your kids
With the return to school fast approaching, it's time to ready the things your kids will need to pass the next year with flying colors. Increasingly, that means computing devices, which means you'll need to spend time thinking about the safety and security of what they will be using. In our "Back...
CVE-2021-46107
Ligeo Archives Ligeo Basics as of 0201-2022 is vulnerable to Server Side Request Forgery SSRF which allows an attacker to read any documents via the download features...
CVE-2021-46107
Ligeo Archives Ligeo Basics as of 0201-2022 is vulnerable to Server Side Request Forgery SSRF which allows an attacker to read any documents via the download features...
Server side request forgery (ssrf)
Ligeo Archives Ligeo Basics as of 0201-2022 is vulnerable to Server Side Request Forgery SSRF which allows an attacker to read any documents via the download features...
CVE-2021-46107
The CVE-2021-46107 entry concerns Ligeo Archives Ligeo Basics. Connected sources confirm a Server-Side Request Forgery (SSRF) vulnerability in the Ligeo Basics download feature, allowing an attacker to read documents. Details across sources consistently identify the affected product (Ligeo Basics...
Ligeo Archives 代码问题漏洞
Ligeo Archives is an archive management software from the Ligeo Archives community in France. A security vulnerability exists in Ligeo Basics by Ligeo Archives, which stems from a server-side request forgery SSRF attack on Ligeo Basics. The vulnerability allows an attacker to read any document vi...
CTF-All-In-One
This is a comprehensive guide to CTF Capture The Flag competitions, specifically focusing on the Pwn binary exploitation aspect. The book is written by Yang Cheng, a member of L-Team, and is intended for beginners. It covers the basics of binary exploitation, including memory management, buffer...
Why we fail at getting the cybersecurity basics right, with Jess Dodson: Lock and Code S02E21
The cybersecurity basics should be just that—basic. Easy to do, agreed-upon, and adopted at a near 100 percent rate by companies and organizations everywhere, right? Youd hope. But the reality is that basic cybersecurity blunders continue to affect businesses of all sizes, which has led to...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Hello guys, yesterday The new CVE-2021-41773 f...
Secure Cloud Migration 101
Cloud migration is a journey not a destination. Learn the basics of security for making the gradual switch so you can get the most out of what the cloud has to offer...
CTF-All-In-One
This is a book about CTF Capture The Flag competitions, specifically the Pwn binary exploitation module. The book is written by Yang Cheng, a member of L-Team, and is aimed at beginners. It covers the basics of binary security, including x86/x64 platforms, Linux systems, and the basics of exploit...
The vulnerability of the LoRa Basics Station software lies in the use of memory after it is freed, allowing a intruder to execute arbitrary code.
The vulnerability of the LoRa Basics Station software relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the MITM Man-In-The-Middle scenario, either through the compromised CUPS server or by modifying settings using...
CVE-2020-4060
In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message https://doc.sm.tc/station/cupsproto.htmlhttp-post-response where the signature length is larger than ...
CVE-2020-4060
In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message https://doc.sm.tc/station/cupsproto.htmlhttp-post-response where the signature length is larger than ...
Design/Logic Flaw
In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption. This bug is triggered on 32-bit machines when the CUPS server responds with a message https://doc.sm.tc/station/cupsproto.htmlhttp-post-response where the signature length is larger than ...