نبض سایبری اخبار امنیت سایبری، با ذکر منبع
EN
CERT/CC Vulnerability Notes

VU#644655: TightVNC and UltraVNC Viewer contains a heap-based buffer overflow

Overview A heap-based buffer overflow exists in the Tight JPEG decoding component of the TightVNC Windows Viewer version 1.3.10 and affected UltraVNC Windows Viewers. An attacker controlling a malicious VNC server can trigger memory corruption by sending a specially crafted screen update. Successful exploitation can crash the viewer and may allow arbitrary code execution, although only denial of service conditions we…

آسیب‌پذیری و روز صفر بات‌نت و DDoS سیستم‌عامل رمزنگاری امنیت هویت و دسترسی
خواندن متن کامل در CERT/CC Vulnerability Notes درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Help Net Security

Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters

EfficientIP Research Labs traced a ClickFix campaign that used fake Zillow apartment-review pages to install NetSupport RAT on visitors’ Windows computers. Each page showed what looked like a routine verification check. Behind it, the page quietly copied a PowerShell command to the clipboard and walked the visitor through pasting and running it. Doing that installs remote-control software that keeps its window hidden…

هوش تهدید سیستم‌عامل
منبع
Help Net Security

PostgreSQL security update fixes 52 vulnerabilities, ends support for PostgreSQL 14

The PostgreSQL Global Development Group released PostgreSQL 18.7, 17.12, 16.16, 15.20 and 14.25 on November 12, fixing 52 security vulnerabilities and more than 140 other bugs. Most of those code execution bugs are memory errors or type confusion, where PostgreSQL handles a value as the wrong data type. They turn up in PL/Perl and PL/Tcl, text search functions such as ts_rank_cd(), parallel query, logical replication…

آسیب‌پذیری و روز صفر پایگاه داده
منبع
Security Affairs

The School Bomb Threats Came From Accounts Already in Stolen Data

Hudson Rock researchers found that two university addresses tied to Italy’s school bomb threats were in infostealer data. On 11 November, bomb-threat emails hit schools across Europe. ANSA, citing the Education Ministry, reported that about 6,000 Italian schools received them. Some evacuated, others kept teaching after talking to police, so the recipient count tells you […]

بدافزار و آلودگی فیشینگ سیستم‌عامل
منبع