176 matches found
CVE-2023-27706
Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes...
CVE-2020-15879
Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses ones beginning with fc, fd, fe, or ff, and the :: address and certain IPv4 addresses 0.0.0.0/8, 127.0.0.0/8, and 169.254.0.0/16...
CVE-2019-19766
The Bitwarden server through 1.32.0 has a potentially unwanted KDF...
CVE-2018-25081
Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element. NOTE: the vendor's position is that there have been important legitimate cross-domain configurations e.g., an apple.com IFRAME element on the icloud.com website and that "Auto-fill on page load" is not...
[SECURITY] Fedora 41 Update: vaultwarden-1.33.2-1.fc41
Unofficial Bitwarden compatible server...
[SECURITY] Fedora 40 Update: vaultwarden-1.33.2-1.fc40
Unofficial Bitwarden compatible server...
[SECURITY] Fedora 40 Update: vaultwarden-1.33.0-1.fc40
Unofficial Bitwarden compatible server...
[SECURITY] Fedora 41 Update: vaultwarden-1.33.0-1.fc41
Unofficial Bitwarden compatible server...
[SECURITY] Fedora 40 Update: vaultwarden-1.32.7-4.fc40
Unofficial Bitwarden compatible server...
[SECURITY] Fedora 41 Update: vaultwarden-1.32.7-4.fc41
Unofficial Bitwarden compatible server...
Vaultwarden 安全漏洞
Vaultwarden is an alternative implementation of the Bitwarden server API written in Rust by Daniel García Personal Developer. A security vulnerability exists in Vaultwarden versions prior to v1.32.5. An attacker exploiting this vulnerability could impersonate a user via a specially crafted...
Facebook Malvertising Campaign Spreads Malware via Fake Bitwarden
A Facebook malvertising campaign disguised as Bitwarden updates spreads malware, targeting business accounts. Users are tricked into installing…...
OPENSUSE-SU-2024:12718-1 bitwarden-2023.2.0-1.1 on GA media
These are all security issues fixed in the bitwarden-2023.2.0-1.1 package on the GA media of openSUSE Tumbleweed...
Attacks, Vulnerabilities and Actors 25 September to 1 October 2023
For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of eight executed attacks, three instances of adversary activity, and four zero-day...
ZenRAT Targeting Windows Users Through Fake Bitwarden Installs
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary ZenRAT is a new malware distributed through fake Bitwarden password manager installers, primarily targeting Windows users. It operates as a modular remote access trojan RAT with information-stealing...
Fake Bitwarden Password Manager Website Drops Windows ZenRAT
By Deeba Ahmed If youve installed Bitwarden Password Manager recently, ensure that you downloaded it from its official website and not… This is a post from HackRead.com Read the original post: Fake Bitwarden Password Manager Website Drops Windows ZenRAT...
New ZenRAT Malware Targeting Windows Users via Fake Password Manager Software
A new malware strain called ZenRAT has emerged in the wild that's distributed via bogus installation packages of the Bitwarden password manager. "The malware is specifically targeting Windows users and will redirect people using other hosts to a benign web page," enterprise security firm Proofpoi...
CVE-2023-38840
Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process...
