I’m a beginner in cryptography and for my first project I use the client’s password to encrypt some data. More specifically, I use the password as passphrase in RSA private key generation). However, I do not want to trust the server when s…
A new alert from CISA, the FBI, the Department of Health and Human Services (HHS), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) reveals that Black Basta affiliates have attacked 12 of the 16 critical infrastructure sectors, inc…
Now I know this website is not for asking for specific software recommendations, but for my website for work purposes (as mentioned in another question,) I feel I need a more secure login protocol than just password- even though the passwo…
A vulnerability, which was classified as problematic, has been found in CrushFTP 10.5.5/10.6.0. Affected by this issue is some unknown functionality of the file /#all/. The manipulation with the input %20'%20onmouseover=alert(1)%20 leads to cross site scripting.
This vulnerability is handled as CVE-2024-22910. The attack may be launched remotely. Furthermore, there is an exploit available.
A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument leave leads to sql injection.
This vulnerability is k…
A vulnerability classified as critical has been found in Tenda O3V2 up to 1.0.0.12. Affected is an unknown function of the file /goform/getTraceroute. The manipulation of the argument dest leads to command injection.
This vulnerability is traded as CV…
A vulnerability was found in gnuboard g6 c2cc1f5069e00491ea48618d957332d90f6d40e4. It has been rated as problematic. This issue affects some unknown processing of the file board.py. The manipulation leads to cross site scripting.
The identification of…
A vulnerability was found in EnterpriseDB EDB Postgres Advanced Server. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to improper privilege management.
This vulnerability was named CVE-2024-4545. The…
A vulnerability was found in Samsung Magician 8.0.0 on macOS. It has been classified as critical. This affects an unknown part of the component Installation. The manipulation leads to permission issues.
This vulnerability is uniquely identified as CVE…
A vulnerability was found in PHPOK 6.4.003 and classified as critical. Affected by this issue is the function index_f of the file phpok64/framework/api/call_control.php. The manipulation leads to sql injection.
This vulnerability is handled as CVE-202…
