#data Archives - Alireza Gharib Blog

January 9, 2025

CVE-2024-54010 – Aruba Networking CX 10000 Series Switches ICMP and UDP Packet Forwarding Vulnerability

CVE ID : CVE-2024-54010 Published : Jan. 8, 2025, 9:15 p.m. | 29 minutes ago Description : A vulnerability in the firewall component of HPE Aruba Networking CX 10000 Series Switches exists. It could allow an unauthenticated adjacent attacker to conduct a packet forwarding attack against the ICMP and UDP protocol. For this attack to be…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #author, #bypass, #cve, #cybersecurity, #data, #security, #un
January 9, 2025

CVE-2024-52869 – Teradata SUSE Enterprise Linux Server Elevated Privilege Group Misassignment

CVE ID : CVE-2024-52869 Published : Jan. 8, 2025, 9:15 p.m. | 29 minutes ago Description : Certain Teradata account-handling code through 2024-11-04, used with SUSE Enterprise Linux Server, mismanages groups. Specifically, when there is an operating system move from SUSE Enterprise Linux Server (SLES) 12 Service Pack (SP) 2 or 3 to SLES 15 SP2…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#cve, #cybersecurity, #data, #go, #security, #un, #ux
January 9, 2025

CVE-2024-45345 – Cisco WebEx Data Placeholder Command Injection Vulnerability

CVE ID : CVE-2024-45345 Published : Jan. 8, 2025, 8:15 p.m. | 1 hour, 28 minutes ago Description : Rejected reason: reserved but not needed Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more… Go to Source

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#cve, #cybersecurity, #data, #go, #security
January 9, 2025

CVE-2025-22141 – WeGIA Web Manager SQL Injection Vulnerability

CVE ID : CVE-2025-22141 Published : Jan. 8, 2025, 7:15 p.m. | 2 hours, 28 minutes ago Description : WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /dao/verificar_recursos_cargo.php endpoint, specifically in the cargo parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #cve, #cybersecurity, #data, #go, #security
January 9, 2025

CVE-2025-22140 – WeGIA SQL Injection Vulnerability (Authenticated)

CVE ID : CVE-2025-22140 Published : Jan. 8, 2025, 7:15 p.m. | 2 hours, 28 minutes ago Description : WeGIA is a web manager for charitable institutions. A SQL Injection vulnerability was identified in the /html/funcionario/dependente_listar_um.php endpoint, specifically in the id_dependente parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #cve, #cybersecurity, #data, #go, #security, #un
January 9, 2025

CVE-2024-55656 – Redis RedisBloom Probabilistic Data Structures Integer Overflow Information Leak Out-of-Bounds Write

CVE ID : CVE-2024-55656 Published : Jan. 8, 2025, 4:15 p.m. | 5 hours, 28 minutes ago Description : RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows an attacker (a redis client which knows the…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #cve, #cybersecurity, #data, #go, #security, #ui, #un
January 9, 2025

Web Engineering: Hack Week 2024

At Canonical, the work of our teams is strongly embedded in the open source principles and philosophy. We believe open source software will become the most prevalent method of software development and delivery in the future. Being open source is more than making the source of your software available, it’s also about contributing to other…

#10definitelytyped, #110react, #111react, #121recharts, #12369nurikk, #14035canonical, #1476grafana, #177mattermost, #18152react, #1843mattermost, #1mattermost, #2230redphx, #29227jasonacox, #29229adlerweb, #29233react, #29251danilowoz, #29272mattermost, #29276leaflet, #326fastapi, #5244pypi, #558mattermost, #6836npm, #6842react, #6862lxd, #71144react, #7591mattermost, #96270mattermost, #data, #go, #hack, #ui, #un
January 9, 2025

Is your organization ready for the future? Why skills matter

The drive toward AI-enabled transformation is causing organizations to focus on upskilling, reskilling and reconnecting their IT teams. Recent data from IDC1 shows that 58% of CEOs are concerned about whether their organization’s skill sets can meet the demands of AI initiatives. This IDC report reinforces the need to invest in building an organization with…

#data, #management, #ui
January 9, 2025

Customize the scope of IAM Access Analyzer unused access analysis

AWS Identity and Access Management Access Analyzer simplifies inspecting unused access to guide you towards least privilege. You can use unused access findings to identify over-permissive access granted to AWS Identity and Access Management (IAM) roles and users in your accounts or organization. From a delegated administrator account for IAM Access Analyzer, you can use the dashboard…

#data, #management, #tech, #ui, #un
January 9, 2025

38C3: It’s TOSLINK, Over Long Distance Fibre

If you’ve owned a CD player or other piece of consumer digital audio gear manufactured since the 1980s, the chances are it has a TOSLINK port on the back. This is a fairly simple interface that sends I2S digital audio data down a short length of optical fibre, and it’s designed to run between something…

#data, #tech, #ui, #un

Tag: #data