نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
SANS Internet Storm Center

The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)

One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding additional parameters to the URL leaked environment variables. Other vulnerabilities allowed setting the "To" address and were heavily abused by spammers. And if parameters were passed directly to the sendmail…

آسیب‌پذیری و روز صفر
خواندن متن کامل در SANS Internet Storm Center درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
SANS Internet Storm Center

Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)

This morning, I was browsing our honeypot data for any new and existing PHP exploit attempts. Instead, I first ran into some GeoServer exploits, but found them to be too boring to write up. This Cisco IOS exploit attempt was a bit more interesting. Still nothing new. I suspect this is for CVE-2023-20198.

آسیب‌پذیری و روز صفر توسعه موبایل
منبع
NCSC Netherlands

NCSC-2026-0468 [1.00] [M/H] Kwetsbaarheid verholpen in Zyxel product

Zyxel heeft een kwetsbaarheid verholpen in de firmware van de Zyxel GS1900-24E netwerk switch, specifiek in versie 2.90(AAHK.2)C0 en eerder. De kwetsbaarheid betreft een out-of-bounds write in het CGI-programma van de management-interface van het apparaat. Een niet-geauthenticeerde aanvaller met toegang tot de management-interface kan via speciaal vervaardigde HTTP-verzoeken commando's uitvoeren op het systeem. De fo…

آسیب‌پذیری و روز صفر امنیت اینترنت اشیا و صنعتی
منبع
Rapid7 Blog

Gartner Report: The Attack Path is Closing Faster than Most Teams Can Patch

Security teams have never lacked vulnerability data. The harder problem is deciding which issues create a credible path to business impact, then acting before that path can be used. As frontier AI makes it faster and less expensive to connect weaknesses, operational assumptions, and legitimate system behavior, that decision window is becoming even tighter.The Gartner® report, Mythos Reprioritizes Cybersecurity Outcom…

آسیب‌پذیری و روز صفر هوش تهدید
منبع