13264 matches found
Malicious code in @nx/node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b11cb4be7497510402676b2b593e6a5d3e0dee4e1443996403e8aa496f284f3 Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file...
Google Reveals UNC6395’s OAuth Token Theft in Salesforce Breach
A new advisory from Google and Mandiant reveals a widespread data breach in Salesforce. Learn how UNC6395 bypassed…...
The 5 Golden Rules of Safe AI Adoption
Employees are experimenting with AI at record speed. They are drafting emails, analyzing data, and transforming the workplace. The problem is not the pace of AI adoption, but the lack of control and safeguards in place. For CISOs and security leaders like you, the challenge is clear: you don't wa...
Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data
A widespread data theft campaign has allowed hackers to breach sales automation platform Salesloft to steal OAuth and refresh tokens associated with the Drift artificial intelligence AI chat agent. The activity, assessed to be opportunistic in nature, has been attributed to a threat actor tracked...
AiShu AnyShare 安全漏洞
AiShu AnyShare is an enterprise content management platform from China-based AiShu. AiShu AnyShare has a security vulnerability that originates from an unauthenticated and uncleaned input to the ServiceAgent API, which could lead to remote code execution...
Digital Arts i-FILTER 安全漏洞
Digital Arts i-FILTER is a web filtering software from Digital Arts Japan. It is used to counter targeted attacks. A security vulnerability exists in Digital Arts i-FILTER that stems from improper default permissions and could lead to arbitrary code execution...
Coolify 安全漏洞
Coolify is an open source and self-hosted Heroku/Netlify/Vercel replacement from coolLabs Open Source. A security vulnerability exists in versions prior to Coolify v4.0.0-beta.420.6, which stems from a remote code execution in the application deployment workflow that could result in gaining root...
Mahara 安全漏洞
Mahara is a free and open source web-based ePortfolio management system from Mahara. A security vulnerability exists in Mahara versions 23.04.8 and 24.04.4 that stems from a maliciously exported download URL that could lead to the download of unauthorized files...
Agiloft 安全漏洞
Agiloft is a contract management platform from Agiloft Corporation in the United States. Agiloft has a security vulnerability that originates from the download of critical system packages over an insecure HTTP connection, which could lead to a man-in-the-middle attack...
Mahara 安全漏洞
Mahara is a free and open source web-based ePortfolio management system from Mahara. A security vulnerability exists in Mahara versions 23.04.8 and 24.04.4 that stems from a learning tool interoperability login that could result in elevated privileges...
The vulnerability of the bfq_bio_merge() function in the block/bfq-iosched.c module exposes the block-level kernel support of the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the bfqbiomerge function in the block/bfq-iosched.c module relates to the reutilization of previously released memory in Linux’s kernel-level block storage mechanism. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
National Public Data Relaunches Despite 2.9 Billion SSNs Breach
It is business as usual at National Public Data NPD despite the breach that exposed 3 billion Social Security numbers and the subsequent leak...
The vulnerability of the Linux operating system’s kernel allows attackers to compromise the confidentiality and accessibility of protected information.
The vulnerability of the Linux operating system’s kernel is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected information...
Linux Distros Unpatched Vulnerability : CVE-2015-2206
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libraries/selectlang.lib.php in phpMyAdmin 4.0.x before 4.0.10.9, 4.2.x before 4.2.13.2, and 4.3.x before 4.3.11.1 includes invalid language values in...
Samarium 安全漏洞
Samarium is an open source business management system by oitcode individual developers. A security vulnerability exists in Samarium 0.9.6 and earlier versions, which stems from the vulnerability of file/dashboard/team to cross-site scripting attacks...
ruoyi-go 安全漏洞
ruoyi-go is a backend management system for individual developers at lostvip.com. A security vulnerability exists in ruoyi-go 2.1 and earlier versions, which originates from the improper handling of the isAsc/orderByColumn parameter in the SelectListByPage function in the file...
Arista EOS 安全漏洞
Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. A security vulnerability exists in Arista EOS that stems from the possibility that the global common encryption key configuration may be recorded in plaintext, potentially leading to...
Appneta Tcpreplay 安全漏洞
Appneta Tcpreplay is a suite of open source utilities for editing and replaying network traffic for UNIX-based operating systems from Appneta, Inc. in the United States. A security vulnerability exists in Appneta Tcpreplay versions 4.5.1 and earlier, which stems from reuse after release and may...
Bouncy Castle 安全漏洞
Bouncy Castle is a collection of APIs used in cryptography organized by Bouncy Castle. It includes APIs for the Java and C programming languages . A security vulnerability exists in Bouncy Castle version 2.1.0, which stems from uncontrolled resource consumption and could lead to over-allocation...