#remote Archives - Alireza Gharib Blog

January 9, 2025

CVE-2025-22145 – Carbon PHP DateTime Remote File Include Vulnerability

CVE ID : CVE-2025-22145 Published : Jan. 8, 2025, 9:15 p.m. | 29 minutes ago Description : Carbon is an international PHP extension for DateTime. Application passing unsanitized user input to Carbon::setLocale are at risk of arbitrary file include, if the application allows users to upload files with .php extension in an folder that allows include…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#cve, #cybersecurity, #file, #go, #remote, #security, #ui, #un
January 9, 2025

CVE-2024-13190 – ZeroWdd Myblog Xml Injection

CVE ID : CVE-2024-13190 Published : Jan. 8, 2025, 9:15 p.m. | 29 minutes ago Description : A vulnerability classified as critical was found in ZeroWdd myblog 1.0. This vulnerability affects unknown code of the file src/main/resources/mapper/BlogMapper.xml. The manipulation of the argument findBlogList/getTotalBlogs leads to xml injection. The attack can be initiated remotely. The exploit has…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#190, #attack, #cve, #cybersecurity, #file, #remote, #security, #un
January 9, 2025

CVE-2024-13189 – ZeroWdd MyBlog Remote File Permission Bypass Vulnerability

CVE ID : CVE-2024-13189 Published : Jan. 8, 2025, 8:15 p.m. | 1 hour, 28 minutes ago Description : A vulnerability classified as critical has been found in ZeroWdd myblog 1.0. This affects an unknown part of the file src/main/java/com/wdd/myblog/config/MyBlogMvcConfig.java. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #bypass, #cve, #cybersecurity, #file, #remote, #security, #un
January 9, 2025

CVE-2025-0291 – Google Chrome Type Confusion Vulnerability

CVE ID : CVE-2025-0291 Published : Jan. 8, 2025, 7:15 p.m. | 2 hours, 28 minutes ago Description : Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Severity: 8.3 | HIGH Visit the link for…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #cve, #cybersecurity, #go, #remote, #security
January 9, 2025

CVE-2024-54818 – SourceCodester Computer Laboratory Management System Unauthenticated Remote OS Command Injection

CVE ID : CVE-2024-54818 Published : Jan. 8, 2025, 7:15 p.m. | 2 hours, 28 minutes ago Description : SourceCodester Computer Laboratory Management System 1.0 is vulnerable to Incorrect Access Control. via /php-lms/admin/?page=user/list. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more… Go to Source

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#cve, #cybersecurity, #go, #management, #remote, #security, #un
January 9, 2025

CVE-2024-12854 – “WordPress Garden Gnome Package Plugin Remote Code Execution File Upload Vulnerability”

CVE ID : CVE-2024-12854 Published : Jan. 8, 2025, 10:15 a.m. | 11 hours, 29 minutes ago Description : The Garden Gnome Package plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the functionality that automatically extracts ‘ggpkg’ files that have been uploaded in all versions up to, and including,…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #author, #cve, #cybersecurity, #file, #remote, #security, #un
January 9, 2025

CVE-2024-12853 – WordPress Modula Image Gallery Remote File Upload Vulnerability

CVE ID : CVE-2024-12853 Published : Jan. 8, 2025, 10:15 a.m. | 11 hours, 29 minutes ago Description : The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10. This makes it possible for authenticated…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #author, #cve, #cybersecurity, #file, #remote, #security, #un
January 9, 2025

Hackers exploit KerioControl firewall flaw to steal admin CSRF tokens

Hackers exploit KerioControl firewall flaw to steal admin CSRF tokens Hackers are trying to exploit CVE-2024-52875, a critical CRLF injection vulnerability that leads to 1-click remote code execution (RCE) attacks in GFI KerioControl firewall product. KerioControl is a … Read more Published Date: Jan 08, 2025 (2 hours, 48 minutes ago) Vulnerabilities has been mentioned in this article.…

CVE, Cybersecurity, Cybersecurity awareness, Security, Threat Intelligence

#attack, #cve, #cybersecurity, #flaw, #hack, #hacker, #remote, #security
January 9, 2025

First Things First | SentinelOne Is A Fortune Best Workplace for Parents

SentinelOne is included in this year’s Fortune Best Workplaces for Parents, ranking among the top 70 companies worldwide for working parents. Wellbeing comes first at SentinelOne – for our customers, our communities, and our colleagues. We are proud to foster a culture of diversity, equality, and understanding for all. Supporting our working parents and the…

#health, #remote, #secure, #ui, #un
January 9, 2025

Running AI Locally Without Spending All Day on Setup

There are many AI models out there that you can play with from companies like OpenAI, Google, and a host of others. But when you use them, you get the experience they want, and you run it on their computer. There are a variety of reasons you might not like this. You may not want…

#data, #hack, #remote, #un, #windows

Tag: #remote