GHSA-Q586-7P8W-9PG8 Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting...

GHSA-236H-R3W7-C85C Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality...

Cross-site Scripting in Apache Atlas

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality...

WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin <= 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin versions = 1.1.0. Solution Update the WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin to the late...

WordPress Atlas – Knowledge Base plugin <= 3.3.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Atlas – Knowledge Base plugin versions = 3.3.0. Solution No patched version available...

WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin <= 1.1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin versions = 1.1.0. Solution Update the WordPress SSL Atlas – Free SSL Certificate & HTTPS Redirect for WordPress plugin to the latest available version at...

WordPress Atlas – Knowledge Base plugin <= 3.3.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Atlas – Knowledge Base plugin versions = 3.3.0. Solution No patched version available...

fracturedatlas.org Cross Site Scripting vulnerability OBB-2383542

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Netlas.io: A new atlas of the Internet

By Soxoj A while ago, I decided to test a new analog of Shodan — the Netlas.io platform only to… This is a post from HackRead.com Read the original post: Netlas.io: A new atlas of the Internet...

GHSA-H6XQ-3H62-99QX Cross-site scripting in Apache Atlas

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability...

Cross-site scripting in Apache Atlas

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability...

Security Bulletin: Log4jShell Vulnerability affects Atlas eDiscovery Process Management IGC Connector ( CVE-2021-44228)

Summary There is a vulnerability in the Apache Log4j open source library used by ATLAS IGC Connector. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system, caused by the...

How we took part in MLSEC and (almost) won

This summer Kaspersky experts took part in the Machine Learning Security Evasion Competition MLSEC — a series of trials testing contestants ability to create and attack machine learning models. The event is comprised of two main challenges — one for attackers, and the other for defenders. The...

Minecraft declared the most malware-infected game

By Waqas According to new research by Atlas VPN, Minecraft related malware infected 44,335 devices while Kaspersky antivirus software detected 300,000 malware cases. This is a post from HackRead.com Read the original post: Minecraft declared the most malware-infected game...

Attack AI systems in Machine Learning Evasion Competition

Today, we are launching MLSEC.IO, an educational Machine Learning Security Evasion Competition MLSEC for the AI and security communities to exercise their muscle to attack critical AI systems in a realistic setting. Hosted and sponsored by Microsoft, alongside NVIDIA, CUJO AI, VM-Ray, and MRG...

Security Auditing for MongoDB on Atlas

MongoDB is a document-oriented NoSQL database that provides high performance, high availability, and easy scalability. To many, it is the leader in the NoSQL space. MongoDB Atlas was launched in June of 2016 and provides MongoDB as a database-as-a-service DBaaS. Atlas provides all of the features...

The vulnerability of the backup function for momentary database snapshots in MongoDB Cloud Manager, MongoDB Ops Manager, MongoDB Atlas Legacy Backups, and the document-oriented database management system MongoDB allows a hacker to trigger a service failure.

The vulnerability of the backup function for instant snapshots of MongoDB Cloud Manager, MongoDB Ops Manager, MongoDB Atlas Legacy Backups, and document-oriented database management systems is related to improper handling of conflicting special elements. Exploiting this vulnerability can allow an...

Finding the Best Servers to Answer Queries -- Edge DNS and Anycast

TL;DR IP Anycast is a network addressing and routing methodology that allows IP addresses to be announced from multiple points on the internet With the proper implementation, Anycast can reduce DNS RTTs and offer innate DDoS protection Akamai's authoritative name service, Edge DNS, combines globa...

atlasautomotive.ca Cross Site Scripting vulnerability OBB-1494847

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

atlas bug fix and enhancement update

An update is available for atlas. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...