نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
SANS Internet Storm Center

The Classics Return: Vulnerable E-Mail Scripts, (Wed, Nov 4th)

One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail. The vulnerability was pretty straightforward: Adding additional parameters to the URL leaked environment variables. Other vulnerabilities allowed setting the "To" address and were heavily abused by spammers. And if parameters were passed directly to the sendmail…

آسیب‌پذیری و روز صفر
خواندن متن کامل در SANS Internet Storm Center درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
AWS Security Bulletins

CVE-2026-119083 - GluonTS arbitrary file write during archive extraction

Bulletin ID: 2026-171-AWS Publication Date: 11/05/2026 08:30 AM PST Description: GluonTS is an open-source Python library for probabilistic time series modeling. We identified CVE-2026-119083, an issue in the archive extraction utility in GluonTS before 0.17.0. An actor who supplies a crafted tar archive containing symbolic or hard links might be able to write arbitrary files outside the intended extraction directory…

آسیب‌پذیری و روز صفر برنامه‌نویسی و زبان‌ها رایانش ابری
منبع
Wordfence Blog

Attackers Actively Probing for Upgrade-Window RCE Vulnerability in WordPress Core

On October 28th, 2026, the WordPress Security Team released WordPress 7.1.4, along with backported security releases for older branches, addressing several security issues, most notably an Unauthenticated Remote Code Execution vulnerability in WordPress core, identified as CVE-2026-119977. The vulnerability affects WordPress core versions 4.7 through 7.1.3 and can be leveraged by unauthenticated attackers to execute…

آسیب‌پذیری و روز صفر
منبع
SANS Internet Storm Center

Vulnerability Scans for Older Cisco IOS Vulnerability / Opt-Out Headers, (Thu, Nov 5th)

This morning, I was browsing our honeypot data for any new and existing PHP exploit attempts. Instead, I first ran into some GeoServer exploits, but found them to be too boring to write up. This Cisco IOS exploit attempt was a bit more interesting. Still nothing new. I suspect this is for CVE-2023-20198.

آسیب‌پذیری و روز صفر توسعه موبایل
منبع