Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure

Wiz CIRT and Wiz Research detail JINX-0164, a threat actor using LinkedIn social engineering, custom macOS malware, and CI/CD hijacking to target cryptocurrency organizations...

RHCOS 1 : openshift-origin-broker-util (RHSA-2014:0461)

The remote Red Hat Enterprise Linux CoreOS 1 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:0461 advisory. - mcollective: world readable client config CVE-2014-0164 Note that Nessus has not tested for this issue but has instead relied only on the...

RHCOS 2 : openshift-origin-broker-util (RHSA-2014:0460)

The remote Red Hat Enterprise Linux CoreOS 2 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:0460 advisory. - mcollective: world readable client config CVE-2014-0164 Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2021-0164

creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-0164

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not have authorisation and CSRF checks in its comingsoonsendmail AJAX action, allowing any authenticated users, with a role as low as subscriber to send arbitrary emails to all subscribed users...

EUVD-2023-0164

Malicious code in bioql PyPI...

CVE-2025-0164

creationtimestamp| type| source ---|---|--- 2025-09-14 17:02:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lysrhmclv22t 2025-09-15 07:49:43+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lyuczfkt7k2i...

Security Bulletin: IBM QRadar SIEM is affected by by improper permission assignment (CVE-2025-0164)

Summary IBM QRadar SIEM is affected by improper permission assignment. Local privileged users may perform unauthorized actions on configuration files. IBM QRadar SIEM has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-0164 DESCRIPTION: IBM QRadar SIEM could allow a local...

CVE-2021-0164

Improper access control in firmware for IntelR PROSet/Wireless Wi-Fi in multiple operating systems and KillerTM Wi-Fi in Windows 10 and 11 may allow an unauthenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0164

In phNxpNciHalNfcDepcmdext of phNxpNciHalNfcDepSWPrio.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-0164

Improper permissions in the installer for IntelR Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-1999-0164

A race condition in the Solaris ps command allows an attacker to overwrite critical files...

CVE-2023-0164

creationtimestamp| type| source ---|---|--- 2025-04-03 19:35:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10318...

Linux Distros Unpatched Vulnerability : CVE-2009-0164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS...

Photon OS 4.0: Nodejs PHSA-2022-4.0-0164

An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0164. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-0164

creationtimestamp| type| source ---|---|--- 2024-02-12 20:26:46+00:00| seen| https://t.me/ctinow/183370...

CVE-2024-0164

Dell Unity is affected by an OS command injection in the svc_topstats utility of the Dell Unity OS, prior to version 5.4 . The root cause is an injection vulnerability that allows an authenticated attacker to execute arbitrary commands with elevated privileges, leading to a high-impact, local com...

SUSE SLES12 Security Update : samba (SUSE-SU-2023:0164-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0164-1 advisory. - A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being...

CVE-2023-0164

OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server. This is possible because the application injects an attacker-controlled parameter into a system function...

CVE-2023-0164

OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server. This is possible because the application injects an attacker-controlled parameter into a system function...