Prof Bill Buchanan OBE FRSE的动态

?? High risk vulnerability in Lobe Chat! CVE-2024-47066 points to a Server-Side Request Forgery (SSRF) issue that could allow attackers to bypass protections and access internal resources. Update to version 1.19.13 to stay safe. #LobeChat #SSRF #OWASP #APIsecurity #opensource https://lnkd.in/eShXFiVk

?? High risk vulnerability detected in NextChat! The product has a Server-Side Request Forgery (SSRF) vulnerability that allows attackers to read and write access to internal HTTP endpoints. No patch is available yet. Users are advised to avoid exposing the application to the public internet. Stay safe! #NextChat #SSRF #OWASP #APIsecurity https://lnkd.in/evt7932S

?? High risk vulnerability in LobeChat! CVE-2024-47066 is a Server-Side Request Forgery (SSRF) issue that could allow attackers to bypass protections and access internal resources. Update to version 1.19.13 to stay safe. #LobeChat #CVE202447066 #SSRF #OWASP #APIsecurity ??? https://lnkd.in/eHCAC3gp

[CVE-2023-47677: HIGH] A cross-site request forgery (csrf) vulnerability exists in the boa CSRF protection functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted network request can lead to CSRF. An attacker can send an HTTP request to trigger this vulnerability. https://lnkd.in/eWsNtgme

C-MOR Video Surveillance 5.2401 / 6.00PL01 Cross Site Request Forgery: C-MOR Video Surveillance versions 5.2401 and 6.00PL01 suffer from a cross site request forgery vulnerability.

New Room Critical from TryHackMe. Room with Basic skills and knowledge to analyze a memory dump. ??Memory Forensics ? Gathering Target Information ?? Searching for Suspicious Activity ?? Finding Interesting Data Room Link: - https://lnkd.in/gTbAmsps #DFIR #MemoryDump #volatility #tryhackme

A quick recorded writeup for the Injection Forensics challenge in CyCTF see you in the finals

Advanced Detection of RATs: Exploring the Capabilities of Wazuh SIEM + XDR #RATDetection #wazuh #SIEM #XDR #limeRAT #threatdetection Wazuh

Heads Up Signal Users! The messaging application 'Signal' is famous among the military and is currently being exploited to deliver DarkCrystal RAT malware to government officials, military personnel, and representatives of defense enterprises in Ukraine. The infection chain begins when the victim receives a message with an archive, password, and instructions to open it. Inside the archive is an executable file (".pif" or ".exe"), which is a RARSFX archive containing a VBE file, a BAT file, and an EXE file. Running these files infects the computer with DarkCrystal RAT malware, granting attackers unauthorized access. https://lnkd.in/gfhejYvG

# DailyDarkWeb - United Kingdom ???? - Alleged Data Leak from Xstrahl eBt Therapy Equipment Company A reported breach claims to have exposed data from Xstrahl, a company specializing in eBt therapy equipment. This incident raises concerns about the security of sensitive corporate information.… https://t.co/un7cHgF77z https://t.co/TgibbFkQL0 https://lnkd.in/dSBq7jgA