👩💻 Nagios XI — RCE
В Nagios XI 2024R1.01 обнаружена уязвимость в компоненте monitoringwizard.php, допускающая аутентифицированную инъекцию SQL (CVE-2024-24401), которая позволяет злоумышленникам создать учетную запись администратора и удаленно выполнить код.
Купить книгу по пентесту для начинающих можно тут
👉 Подписаться 👈
#nagios #sql #exploit
BY Security
The super secure UAE-based Telegram messenger service, developed by Russian-born software icon Pavel Durov, is looking to raise $1bn through a bond placement to a limited number of investors from Russia, Europe, Asia and the Middle East, the Kommersant daily reported citing unnamed sources on February 18, 2021.The issue reportedly comprises exchange bonds that could be converted into equity in the messaging service that is currently 100% owned by Durov and his brother Nikolai.Kommersant reports that the price of the conversion would be at a 10% discount to a potential IPO should it happen within five years.The minimum bond placement is said to be set at $50mn, but could be lowered to $10mn. Five-year bonds could carry an annual coupon of 7-8%.
Importantly, that investor viewpoint is not new. It cycles in when conditions are right (and vice versa). It also brings the ineffective warnings of an overpriced market with it.Looking toward a good 2022 stock market, there is no apparent reason to expect these issues to change.
Security from fr