pizza-taxi-24.de Cross Site Scripting vulnerability OBB-3960272

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hacking Wireless Bicycle Shifters

This is yet another insecure Internet-of-things story, this one about wireless gear shifters for bicycles. These gear shifters are used in big-money professional bicycle races like the Tour de France, which provides an incentive to actually implement this attack. Research paper. Another news stor...

CVE-2024-42321

In the Linux kernel, the following vulnerability has been resolved: net: flowdissector: use DEBUGNETWARNONONCE The following splat is easy to reproduce upstream as well as in -stable kernels. Florian Westphal provided the following commit: d1dab4f71d37 "net: add and use skbgethashsymmetricnet" bu...

gallery4.de Cross Site Scripting vulnerability OBB-3954791

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Unite Gallery Lite Plugin <= 1.7.62 is vulnerable to SQL Injection

Software Unite Gallery Lite Type Plugin Vulnerable versions = 1.7.62 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-43207 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 6c830f0a9692 Credits João Pedro S Alcântara Kinorth Required privile...

Elasticidad de la nube

Descripción general de la elasticidad de la nube La flexibilidad es uno de los atributos cardinales de la informática en la nube, conocido formalmente como elasticidad de la nube. Este atributo es esencial en el campo de las tecnologías de la información, facilitando el ajuste fluido de los...

CIRCIA – Ley de notificación de incidentes cibernéticos para infraestructuras críticas

¿Qué es CIRCIA? CIRCIA, o Cyber Incident Reporting for Critical Infrastructure Act, es una propuesta de ley que busca fortalecer la seguridad cibernética en los Estados Unidos. Esta legislación tiene como objetivo principal proteger la infraestructura crítica del país, como las redes eléctricas,...

CISO: funciones y responsabilidades laborales 🛡️

Significado de CISO En el ámbito corporativo, CISO es un acrónimo ampliamente reconocido que denota a "Chief Information Security Officer", que se puede interpretar en español como el Encargado Principal de Salvaguardar la Información. Este encargo representa una posición esencial en el organigra...

Definición de la tríada de la CIA. Ejemplos de confidencialidad, integridad y disponibilidad

Definición de la tríada de la CIA El Modelo AIC o la Triada AIC es una estrategia clave para abordar y coordinar las metodologías de resistencia cibernética. Este enfoque obedecer a tres conceptos clave: la Blindaje, Fidelidad y Accesibilidad. Cada uno de estos conceptos juega un papel determinan...

CVE-2024-42100

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: common: Don't call hwtoccucommon on hw without common In order to set the rate range of a hw sunxiccuprobe calls hwtoccucommon assuming all entries in desc-ccuclks are contained in a ccucommon struct. This assumpti...

CVE-2024-42100 clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: common: Don't call hwtoccucommon on hw without common In order to set the rate range of a hw sunxiccuprobe calls hwtoccucommon assuming all entries in desc-ccuclks are contained in a ccucommon struct. This assumpti...

CVE-2024-42100

Technical details for CVE-2024-42100 are not provided in the connected documents. The materials reference the CVE but do not specify affected products, versions, root cause, impact, or fixes beyond the initial description; monitor for updates.

WordPress Web Directory Free plugin < 1.7.2 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Simone Onofri, Kim Cerra, Andrea De Dominicis in WordPress Plugin Web Directory Free versions 1.7.2...

theatredelusine.ch Cross Site Scripting vulnerability OBB-3951276

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Escalado automático

¿Qué es el escalamiento automático? El Auto-Scaling, o Escalado Dinámico, constituye una estrategia revolucionaria y efectiva para la ajustabilidad de los medios informáticos condicionada a las oscilaciones en las demandas presentes. Al garantizar la disponibilidad de los recursos informáticos...

de-timing.de Cross Site Scripting vulnerability OBB-3945084

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dne24.de Cross Site Scripting vulnerability OBB-3943144

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

chatelet-de-campo.com Cross Site Scripting vulnerability OBB-3940781

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6868-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6868-1 advisory. Sander Wiebing, Alvise de Faveri Tron, Herbert Bos, and Cristiano Giuffrida discovered that the Linux kernel mitigations for the initial Bran...

klebeschrift84.de Cross Site Scripting vulnerability OBB-3939916

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...