Spremljamo ranljivosti v izdelkih največjih proizvajalcev, kot so Microsoft, Cisco, Fortinet, Citrix in drugi. Izberite proizvajalca za seznam njegovih aktivnih ranljivosti in naših člankov.
Lg: ranljivosti v zadnjem letu
| CVE | CVSS | EPSS | CISA KEV | Proizvajalec | Opis (NVD, angleško) |
|---|---|---|---|---|---|
| CVE-2023-6317 | 9,8 Kritično | 1,1 % | – | Lg | A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN. Full versions and TV models affected: webOS 4.9.7 - 5.30.40 running on |
| CVE-2023-6319 | 7,2 Visoko | 6,4 % | – | Lg | A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker c |
| CVE-2023-6318 | 7,2 Visoko | 4,7 % | – | Lg | A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can ma |
| CVE-2023-6320 | 7,2 Visoko | 3,9 % | – | Lg | A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenti |
Naši članki: Lg
LG webOS: štiri ranljivosti omogočajo prevzem pametnih televizorjev brez prijave
Raziskovalci so razkrili štiri ranljivosti v LG webOS, ki jih je mogoče verižiti za pridobitev root dostopa do pametnih televizorjev brez PIN kode ali kakršne koli interakcije lastnika.…
Phone Phishing Gang Busted: Eight Arrested in Belgium and Netherlands
Belgian and Dutch authorities have made significant strides in combating a "phone phishing" gang that operated chiefly from the Netherlands. This coordinated international operation led to...
Unveiling the Tactics of the Infamous Chinese Espionage Group “ChamelGang”
Chinese Cyberespionage Group ChamelGang Targets Critical Infrastructure in Asia A recent report from SentinelOne has shed light on the activities of a Chinese cyberespionage group known...
Geopolitika in vrzel v kibernetski odpornosti: zakaj sodita v vaš model groženj
Akshay Joshi, vodja centra za kibernetsko varnost pri Svetovnem gospodarskem forumu, v intervjuju za Help Net Security opozarja, da geopolitika, umetna inteligenca in industrializirana prevara spreminjajo naravo kibernetskega…
Varnost e-pošte: Najnovejši sevarnostni trendi in poslovni zahteve
Vzpostavljena spam filter tržna rast trendi analiza in dinamična zahteva, 2024 do 2025 V svetu, kjer se tehnologija hitro razvija, je varnost e-pošte postala osrednja tema....
Vodni Barghest Botnet heka več kot 20.000 IoT naprav
## Proxy Botneti in Kibernetske Grožnje Proxy botneti, ki jih vzpostavijo tako državni kot nedržavni akterji, igrajo ključno vlogo v svetu zlonamernih dejavnosti. Takšni botneti zagotavljajo...
Insights on Recent Cybersecurity Incidents and Vulnerabilities
Understanding CVE-2024-12646: A Security Vulnerability CVE-2024-12646 is a recent vulnerability that has raised alarms in the cybersecurity community. This flaw targets Chunghwa Telecom’s Topm Client using...
Nov PXA Stealer napade vlade in krade občutljive podatke.
# Napadalec izkorišča ranljivosti za ciljanje na izobraževalne in vladne organizacije Napadalec, ki cilja na indijske izobraževalne ustanove in evropske vladne organizacije, izkorišča ranljivosti za krajo...
CERT-UA Phishing Alert: Targeted Attacks on Ukraine’s Defense and Security Force
CERT-UA Warns of Phishing Attacks Targeting Defense Companies The Computer Emergency Response Team of Ukraine (CERT-UA) has issued a warning about new phishing attacks aimed at...
