#190 Archives - Alireza Gharib Blog

January 9, 2025

CVE-2024-13190 – ZeroWdd Myblog Xml Injection

CVE ID : CVE-2024-13190 Published : Jan. 8, 2025, 9:15 p.m. | 29 minutes ago Description : A vulnerability classified as critical was found in ZeroWdd myblog 1.0. This vulnerability affects unknown code of the file src/main/resources/mapper/BlogMapper.xml. The manipulation of the argument findBlogList/getTotalBlogs leads to xml injection. The attack can be initiated remotely. The exploit has…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#190, #attack, #cve, #cybersecurity, #file, #remote, #security, #un
January 9, 2025

Operation Digital Eye | Chinese APT Compromises Critical Digital Infrastructure via Visual Studio Code Tunnels

Threat actors abused Visual Studio Code and Microsoft Azure infrastructure to target large business-to-business IT service providers in Southern Europe. Executive Summary From late June to mid-July 2024, a suspected China-nexus threat actor targeted large business-to-business IT service providers in Southern Europe, an activity cluster that we dubbed ‘Operation Digital Eye’. The intrusions could have…

#190, #82, #author, #browser, #tech
January 9, 2025

Tech In Plain Sight: Security Envelopes

You probably get a few of these things each week in the mail. And some of them actually do a good job of obscuring the contents inside, even if you hold the envelope up to the light. But have you ever taken the time to appreciate the beauty of security envelope patterns? Yeah, I didn’t…

#190, #go, #tech, #ui, #un
January 8, 2025

2025 Guide: Purchasing Cybersecurity Tools and Solutions

This week in cybersecurity from the editors at Cybercrime Magazine –Read the Full Guide In American City & County Sausalito, Calif. – Dec. 18, 2024 Global cybercrime costs are rising rapidly, with estimates reaching $10.5 trillion by 2025, according to Cybersecurity Ventures. These financial hits stem from issues like damaged or stolen data, productivity losses, business…

General

#190, #tech
January 8, 2025

Remote hacking is possible for Garrett walk-through metal detectors.

A network component in Garrett Metal Detectors contains a number of security flaws that could allow remote attackers to bypass authentication requirements, tamper with metal detector configurations, and even execute arbitrary code. In a disclosure released last week, Cisco Talos noted that an attacker could use this module to remotely monitor statistics on a metal…

CyberCrime, CyberManiac, Cybersecurity, Cybersecurity awareness, Security Awareness, Threat Intelligence

#190, #cyber-crime-news, #cyberalerts, #cybercrimenews, #hacking, #metaldetectors, #remote, #vulnerability
January 7, 2025

CVE-2024-44450 – AIMS eCrew Authorization Bypass Vulnerability

CVE ID : CVE-2024-44450 Published : Jan. 7, 2025, 6:15 p.m. | 1 hour, 30 minutes ago Description : Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 #190. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more… Go…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#190, #cve, #cybersecurity, #security

Tag: #190

CVE-2024-13190 – ZeroWdd Myblog Xml Injection

Operation Digital Eye | Chinese APT Compromises Critical Digital Infrastructure via Visual Studio Code Tunnels

Tech In Plain Sight: Security Envelopes

2025 Guide: Purchasing Cybersecurity Tools and Solutions

Remote hacking is possible for Garrett walk-through metal detectors.

CVE-2024-44450 – AIMS eCrew Authorization Bypass Vulnerability