Cybersecurity information flow

Prison Management System Using PHP suffers from a remote SQL injection vulnerability that allows for authentication bypass.

" 使用 PHP 的监狱管理系统存在一种远程 SQL 注入漏洞，允许绕过身份验证。"

Leafpub version 1.1.9 suffers from a persistent cross site scripting vulnerability.

" 版本1.1.9的Leafpub存在一种持久的跨站脚本漏洞。"

Chryp version 2.5.2 suffers from a persistent cross site scripting vulnerability.

" Chryp 2.5.2 版本存在一种持久的跨站脚本漏洞。"

Red Hat Security Advisory 2024-2833-03 - An update to the images for Red Hat Integration - Service Registry is now available from the Red Hat Container Catalog. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Issues addressed include denial of service and memory leak vulnerabilities.

" 红帽安全公告2024-2833-03 - 现已从红帽容器目录提供 Red Hat 集成 - 服务注册表图像更新。本文档的目的是向您通报此发布中修复的安全问题。解决的问题包括服务拒绝和内存泄漏漏洞。"

Apache mod_proxy_cluster suffers from a cross site scripting vulnerability.

" Apache mod_proxy_cluster模块存在跨站脚本漏洞。"

Backdoor.Win32.AsyncRat malware suffers from a code execution vulnerability.

" 后门病毒Backdoor.Win32.AsyncRat存在代码执行漏洞。"

Plantronics Hub version 3.25.1 suffers from an arbitrary file read vulnerability.

"  Plantronics Hub 3.25.1 版本存在任意文件读取漏洞。"

TrojanSpy.Win64.EMOTET.A malware suffers from a code execution vulnerability.

" 木马间谍程序 Win64.EMOTET.A 存在代码执行漏洞。"

CrushFTP versions prior to 11.1.0 suffers from a directory traversal vulnerability.

" CrushFTP版本11.1.0之前存在目录遍历漏洞。"

Ubuntu Security Notice 6772-1 - Jan Schermer discovered that strongSwan incorrectly validated client certificates in certain configurations. A remote attacker could possibly use this issue to bypass access controls.

" Ubuntu安全通知6772-1 - Jan Schermer发现，在某些配置下，strongSwan错误地验证了客户端证书。远程攻击者可能利用此问题绕过访问控制。"

Ubuntu Security Notice 6767-2 - Chenyuan Yang discovered that the RDS Protocol implementation in the Linux kernel contained an out-of-bounds read vulnerability. An attacker could use this to possibly cause a denial of service. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.

" Ubuntu安全通知6767-2 - 陈源（Chenyuan Yang）发现Linux内核中的RDS协议实现包含一个越界读取漏洞。攻击者可能利用此漏洞导致拒绝服务。在Linux内核中发现了一些安全问题。攻击者可能利用这些问题来破坏系统。"

By Joe Sweeney and William Woodruff Last November, we announced our collaboration with Alpha-Omega and OpenSSF to add build provenance to Homebrew. Today, we are pleased to announce that the core of that work is live and in public beta: homebrew-core is now cryptographically attesting to all bottles built in the official Homebrew CI. You […]

" 乔·斯威尼和威廉·伍德鲁夫 去年11月，我们宣布与Alpha-Omega和OpenSSF合作，为Homebrew添加构建起源。如今，我们很高兴地宣布，这项工作的核心已经上线，并进入公共测试版：homebrew-core现在通过加密认证官方Homebrew CI中构建的所有瓶装酒。您 […]"

Trustwave SpiderLabs’ latest report, the 2024 Public Sector Threat Landscape: Trustwave Threat Intelligence Briefing and Mitigation Strategies details the security issues facing public sector security teams as they try to strike a balance between supplying needed services and deploying the cybersecurity necessary to protect data placed in their charge.

" Trustwave SpiderLabs的最新报告《2024年公共部门威胁景观：Trustwave威胁情报简报及缓解策略》详细介绍了公共部门安全团队在平衡提供所需服务和部署必要网络安全以保护他们负责的数据方面所面临的安全问题。"

Trustwave SpiderLabs’ 2024 Public Sector Threat Landscape: Trustwave Threat Intelligence Briefing and Mitigation Strategies report details the security issues facing public sector security teams as they try to strike a balance between supplying needed services and deploying the cybersecurity necessary to protect data placed in their charge.

" 2024年Trustwave蜘蛛实验室公共部门威胁景观：Trustwave威胁情报简报及缓解策略报告详细介绍了公共部门安全团队在平衡提供所需服务和部署保护受托数据的网络安全方面所面临的的安全问题。"

LKM Linux rootkit

Python 3 script to dump/scrape/extract company employees from LinkedIn API

Research by: Antonis Terefos Introduction PDF (Portable Document Format) files have become an integral part of modern digital communication. Renowned for their universality and fidelity, PDFs offer a robust platform for sharing documents across diverse computing environments. PDFs have evolved into a standard format for presenting text, images, and multimedia content with consistent layout and […]
The post Foxit PDF “Flawed Design” Exploitation appeared first on Check Point Research.

" 研究由：Antonis Terefos\n\n引言\nPDF（便携式文档格式）文件已成为现代数字通信的重要组成部分。因其通用性和可靠性而闻名，PDF为在不同计算环境下共享文档提供了强大的平台。PDF已经演变为一种展示文本、图像和多媒体内容的标准化格式，具有统一的布局和……\n\n本文首先出现在Check Point研究部。\n\n关于福克斯IT（Foxit）PDF的“缺陷设计”利用"

Unorthodox and stealthy way to inject a DLL into the explorer using icons