Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Event Updates

Content tagged with Black Hat posted in June 2015
Black Hat USA 2015: Briefings Begin
Event Updates  |  6/25/2015  | 
You know a Black Hat event is, if not quite imminent, at least on the horizon when we start rolling out intel updates for our Briefings. Briefings are the world-class, widely diverse, super-fresh tech presentations our shows are famous for. And intel updates? You're in one. Our first topic is one we've seen a lot in the news lately: the capacity for computers to learn.
Black Hat USA 2015: Best of the Rest
Event Updates  |  6/12/2015  | 
Today's Black Hat USA 2015 Training update has a little bit of everything, a quartet of intriguing Trainings that didn't quite fit in elsewhere. Spoiler: You're gonna build a drone!
Black Hat USA 2015: Digital Detectives
Event Updates  |  6/5/2015  | 
Was someone here? What did they do? And are they still doing it? If you can't routinely answer those questions, your computer infrastructure is at risk. Forensics is the art of filling in those answers, pointing the way toward an effective response and hopefully better defenses in the future, and is the focus of today's trio of Black Hat USA 2015 Trainings.


Edge-DRsplash-10-edge-articles
7 Old IT Things Every New InfoSec Pro Should Know
Joan Goodchild, Staff Editor,  4/20/2021
News
Cloud-Native Businesses Struggle With Security
Robert Lemos, Contributing Writer,  5/6/2021
Commentary
Defending Against Web Scraping Attacks
Rob Simon, Principal Security Consultant at TrustedSec,  5/7/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-23691
PUBLISHED: 2021-05-14
YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.
CVE-2020-18166
PUBLISHED: 2021-05-14
Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension to the component "admin/wenjian.php?wj=../templets/pc".
CVE-2020-18167
PUBLISHED: 2021-05-14
Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Introduction" field of component "admin/info.php?shuyu".
CVE-2020-23689
PUBLISHED: 2021-05-14
In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.
CVE-2021-25941
PUBLISHED: 2021-05-14
Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.