From 7eb02f902628103810d2a99437b02e1ac46cd545 Mon Sep 17 00:00:00 2001 From: Github-Bot Date: Mon, 26 Feb 2024 03:24:38 +0000 Subject: [PATCH] Updated by Github Bot --- cache/Cert 360.dat | 1 + cache/RedQueen.dat | 1 + data/cves.db | Bin 46272512 -> 46276608 bytes docs/index.html | 26 +++++++++++++------------- 4 files changed, 15 insertions(+), 13 deletions(-) diff --git a/cache/Cert 360.dat b/cache/Cert 360.dat index abdd3a5758a..78bc11e3042 100644 --- a/cache/Cert 360.dat +++ b/cache/Cert 360.dat @@ -164,3 +164,4 @@ d8c34853fbcc6b39ae0a3783c6fa6d44 48ff3925c0cc22862b0d6e1f52140bdc f000a20bfa53fd8b0f5231b52ff34577 55c72f6f2af616fbddbb643df06c3b3a +bc2c3923f651854c68f2dd6f99d69f0a diff --git a/cache/RedQueen.dat b/cache/RedQueen.dat index 49575f3d2e3..a5e78f25a81 100644 --- a/cache/RedQueen.dat +++ b/cache/RedQueen.dat @@ -118,3 +118,4 @@ b7ea85bfcc761d1a31eed633b0fdcf88 7f8f74fb7d80f06199d9eb41bcaa5cce 74912b600c66d27f10b69747660626a7 8f56dc22ce5356a70c244c9549fee0b6 +6e9a62415a6d721405d639aa522eec7d diff --git a/data/cves.db b/data/cves.db index fb159ead794a6fa0d08abe3b5081178ec7b2a4f8..0fc51716243d09649bda0161ea290d279c3e3be4 100644 GIT binary patch delta 2987 zcmW;OXK)l$8-`)B5PHB+MOr|*1U8%OCW}&}h@kW)0`jD6G=hL3f`|eE9w`b0l%k*u zp(E0ZA{guy?7g9g*b8=S-<|Krb6=FFLQ=FFTq>lZedb9`ZglE#T+Dpcs$a(PPk zgfYdk60Cq#(W+!6T9vITR#mH-Ro$v#)wGhVT2^iA0xQ|7W7W0lS@o?3RzvGTtC4k) z)!1rcHMN>q&8-xxh1Jr!*lK09w%S;2t#(#>tAllk)zM0|I$52qpp|BYtaK~G3R@8? z)5@}oTjW)y?W|^{_6tdRo1#-c}#$3ahVmrPa^sZ(U_wZ4IynT7#^?)(~r` zHOv}rjj%>qqpWMJ(bl!r7;CIG&brPTZ!w>2E62*U@~oJZZ(VQQU=>(5S`(~^)=kzV zYqB-Py4fnUrdmbTE!H$^x^=5H!@A9yY29w!Va>8;TXU>pYpylVns3><(^_CHv=&*5 zt-GwdttHk{YnfGIEw@%!_gME@E3H-5YHN*kpLM^r)>>yhU_EHXt@YLhtJK5)G3#-w%sOs8 zVLfR*Wj$>@V?ApkI3w^`-Td^|kel^{w@t^}Y3j^`rHZb?`osFuI&b}D{cZhY{cHWVNC``nfB-6@5)x4vRZtbxP#rZ;6G^Cr+PDD8sDrww zhx%xMhPV)oa1k1#37VoAnj-}*&=MD;6DaH9_91TMh9`d$a2sag zcHDtkn2k9o#$3$9d>D6P0TyBr7UM45jU`x$WhlXNtiV0E7b~#}tFZ?6;eM>eIy`^} z5yyILKq)q26EPCSfV*o{5di+$LS12~97IE+W|D30JU9K|s_jxrp_ z6L=C&;b}aBXYm}K#|wB7FX3gJz)8G{5Fg=Ve1cQ> z6rbTVKF1k+fwTA$U*T(fgKzO2zQ+&v5kKJ^e#S5O6~Ezk{DD7l9)IC){DXh-U&0~< zc>V~WA}S#fl~Dy%Q4Q5m12vI^TBwZ+kc>L0i+ZS!255*2(FhlzF`A$$nxQ#T&;l)S zF)9hGPUqVic~yXk3di7>jYZ4&zZi|7_$S7kP*wAJ^js z6yQcoz(m}HNtlc&xEY0*iXz;CX_$^%F$1?@CT_&!-4aGgv7Gsk}e600*M`4xODik zm1hnI$Rp)>v^+=3^H_O~mgiV`9xqQ>d5#ClR-SnxFrh<@Bu)(^HLj5KcT!pMp2-Q- z6U$P98v>Q9jwv4N(vj5%G-_YmqC!$}I1-CyM?x8C;p|9WW+*Kq7|x5NN3*lTp-?QA zo0)g^Na>l9rM*V>Neu-<8L6RgT2{1YY*Oyzi4zMZO-<=Py=Z*y_=yEMh1rEO;=#=a z0y#s&(admKG!!l0981l}&kLsJWMl?Yvt!XnRz@s0I~2*7H`}Enst@RsG%DS7i>u}2 zhH}%Rq4fL+=Z7p<+>XJkAYsc5ItQRjicQlX~A9Qkcpmu!0 zrul(7@xeti1NGx2Ma=`r$*1QOr)X5cq@q}1%E*FgvBLPN^j{M8Hw@?H+j-rsbq%=EZXV2L~x$wEzGB delta 2631 zcmWmG<#!eY7>057!pPAuy1To(yL04CcXyAtVWVq|?(QDFVSo~LfP$a`3MOFyDqio0 z-}MLF=RD^;kqJ@Zkz1p}m*)tLNR+5#z7=`vghb4i6=DUf#8wh3)Jke4vyxjWtdv$N zE6hr5rLodl>8$it1}meL$;xbnTUo5ERyHfUmBY$u<+5^Hd91uvJ}bXfz$$1JvI<*8 ztfE#itGHFdDruFnN?T>DvQ{~(yj8)fXjQT*TUD&8RyC`-Rl}-j)v{_^b*#EpJ*&Re zz-nkUvKm`Wtfp2otGU&}YH78yT3cTdP0dRo1# z-WL1xvHDv5tp3&jYoImA8f*=*hFZg{;noOiq&3PKZH=+UTH~zo)&y&!HOZQ6O|hn0 z)2!*%3~Qz}%ZjvSTXU?r);!DBd~1OfWkp*Htwq*iYl*egT4pV`R#+>oRn}@N##&>= zT5GL!)_QA$wb9ySZML>pTdi%@c58>V)7oY2w)R+it$o&h>wtC8I%FNTj#x*nW7cu& zgmuz7Wu3O-tTWbG>zsAox?o+jE?Mzbf_2$?%X-^-$9mVgVqLY~v);F^S=X%_)=ldJ z>qF}!>tpK^>r?A9>vQW1>r3mFb=&&N`r5i<-L<~4?pgP(Z>{gF@2v;cL+g?CgY~2J z*m`39Wc_UYV*P6UX8mqGwVqketrylG)}Pj2*5B4k>y`D|`p5d$`p&%7 z1ffWZWJrz_NQqPkLu#Z!TBJjIWI#q_LS}>`3$h{`vLgp_A{TNa5Aq@(@}mF>q7VwB z2#TT@ilYQdq7+J_49cP$%A*1*q7o{j3aX+Ss-p&Kq84hS4(g&F>Z1V~q7fRS37VoA znxh3;q7_=B4cej|+M@$Hq7yo!3%Vi#-OwF9&=bAT8^QhipfCENKL%hR24OIUU?_%R zI7VP3MqxC@U@XRAJSJcwCSfwBU@E3zI%Z%dW+4)@F$Z%o55{~fKop{}5R0%FORyBn zupBF}605KpF<66Gti?L4#|CV~CTzwQY{fQg#}4eoF6_o0?8QFp#{nF~AsogL9K|sl z#|fOoDV#!3wKEbE> z44>l*e2H7Qjj!-E?%*!I!9Co^xA+d<;{hJx5q`jrc#J3b2|wc({EFZ3JD%bhp5q1n zz@PXFf8!-y;WhrjzxWStLZTJm{1HH6Bta;WA{mk+1yUjv!jKwikQV8X9vP4knUERb z$bziMhV00JoXCaT$b-Ddhx{mjf+&Q-D1xFWhT4JD1)*nhw`X^il~IjsDi4f zhU%z+ny7`^sDrwwhx%xMhG>MwXo99_hURF2mS~06XoI$BhxX`zj_8EW=z^|@KsR(p z5A;MY^hR+1KIn^n=#K#yh(Q>PAsC8b7>*GbiBTAhF&K++7>@~3lN29EW{!##u6;WGAzdmti&p;Mhw;<7HhE%>#+eFu?d^81zWKV z+pz;Xu?xGg2Yay(`*8pVaR`TT1V?cU$8iEDaSEpc7Zn%Sc`x~l(3nKQXD>eNeq7*H yATC3~>bZfKwqa?O#XgJ+kTb!Y4dz@h=YzQr%*9|X1rr}kLLff&;pM=P;{OBU-S2P! diff --git a/docs/index.html b/docs/index.html index 884340aaf5a..93b553d2a25 100644 --- a/docs/index.html +++ b/docs/index.html @@ -1,4 +1,4 @@ - + @@ -27,6 +27,14 @@

眈眈探求 | TITLE URL + + bc2c3923f651854c68f2dd6f99d69f0a + + 2024-02-26 03:00:09 + 安全事件周报 2024-02-19 第8周 + 详情 + + 55c72f6f2af616fbddbb643df06c3b3a CVE-2024-21413 @@ -259,14 +267,6 @@

眈眈探求 | 详情 - - e0eeac094199a36e77b80367b0494ff0 - - 2023-11-13 09:06:47 - 安全事件周报 2023-11-06 第45周 - 详情 - - @@ -286,7 +286,7 @@

眈眈探求 | + 2024-02-24 05:15:44 Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemath_mul function in src/curveMath.c, due to being used and interpreted as user-defined type. Depending on the variable's actual value it could be arbitrary free(), arbitrary realloc(), null pointer dereference and other. Since the stack can be controlled by the attacker, the vulnerability could be used to corrupt allocator structure, leading to possible heap exploitation. The attacker could cause denial of service by exploiting this vulnerability. 详情 @@ -294,7 +294,7 @@

眈眈探求 | + 2024-02-24 05:15:44 Versions of the package sanitize-html before 2.12.1 are vulnerable to Information Exposure when used on the backend and with the style attribute allowed, allowing enumeration of files in the system (including project dependencies). An attacker could exploit this vulnerability to gather details about the file system structure and dependencies of the targeted server. 详情 @@ -302,7 +302,7 @@

眈眈探求 | + 2024-02-24 05:15:43 The Archivist – Custom Archive Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘shortcode_attributes' parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. 详情 @@ -310,7 +310,7 @@

眈眈探求 | + 2024-02-24 00:15:45 Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specific conditions could potentially enable a remote authenticated attacker to associate another user's MFA mobile application. 详情