13284 matches found
PT-2024-40073 · Apache +1 · Apache +1
Name of the Vulnerable Software and Affected Versions: ibexa post-install versions prior to the patched versions Description: The issue is related to the BREACH vulnerability, which affects HTTP compression and can allow secrets to be extracted through carefully crafted requests. This is due to...
PT-2024-40372 · Varnish +1 · Varnish +1
Name of the Vulnerable Software and Affected Versions: ezplatform-http-cache affected versions not specified Description: The issue is related to the BREACH vulnerability, which affects HTTP compression and can allow secrets to be extracted through carefully crafted requests. This is due to...
TP-Link Archer 安全漏洞
TP-LINK Archer is a series of routers from China's Universal Link TP-LINK. A security vulnerability exists in TP-Link Archer that stems from the presence of a certified Remote Code Execution RCE vulnerability...
Rizin 安全漏洞
Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...
SiYuan 安全漏洞
SiYuan is a privacy-first personal knowledge management system from SiYuan open source. A security vulnerability exists in SiYuan version 3.1.11, which stems from an SQL injection vulnerability contained in the id parameter of the /getAssetContent file...
Siyuan 安全漏洞
SiYuan is a privacy-first personal knowledge management system from SiYuan open source. A security vulnerability exists in Siyuan version 3.1.11, which stems from an SQL injection vulnerability contained in the notebook parameter of the /searchHistory file...
Medical testing company LifeLabs failed to protect customer data, report finds
In 2019, a ransomware attack hit LifeLabs, a Canadian medical testing company. The ransomware encrypted the lab results of 15 million Canadians, and personally identifiable information PII of 8.6 million people was stolen. After noticing the attack, LifeLabs informed its customers and the Canadia...
MAL-2024-11025 Malicious code in aa-bundler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd321f0852dcc9dfd3186bbde3c8ba367be98c8f8f47d93954672d5f7c702bf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Hacker in Snowflake Extortions May Be a U.S. Soldier
Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake , but a third suspect -- a prolific hacker known as Kiberphant0m -- remains at large and continues to publicly extort victims. However, this person's...
ZOHO ManageEngine Analytics Plus 安全漏洞
ZOHO ManageEngine Analytics Plus is a self-service IT analytics solution from ZOHO. Get a better view of your IT data with rich visualizations and dashboards. A security vulnerability exists in ZOHO ManageEngine Analytics Plus prior to version 6100 that stems from vulnerability to an authenticate...
MAL-2024-10995 Malicious code in pmto (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cab6d5c183f9d9ae1caa6a140cfe73761fe0db12d3067e9e393fdfc86f89b1a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10952 Malicious code in cfc-i18n (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e9bcf726b0cddf43089f7e5225471ba86fc21687c8987ec61276e9196dd994 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Taiga 安全漏洞
Taiga is a free open source project management tool from Taiga Open Source. A security vulnerability exists in Taiga version v6.8.1, which stems from the inclusion of a CSV injection issue that could lead to arbitrary code execution...
“Hilariously insecure”: Andrew Tate’s The Real World breached, 800,000 users affected
Andrew Tate's online education platform The Real World—formerly known as Hustlers University—has been hacked and user data has been stolen. Hacktivists flooded the primary chatroom with emojis as proof that they had breached the site. After this they shared approximately 794,000 usernames of,...
MAL-2024-10920 Malicious code in conibase (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e70af172c9db7c1934d326429c7bc63ed721d3934ada0d8197542fb231535fec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rootkitfix (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f464c06e5146e96a9feed234e30390194912e24838433cad3daab70ecb350b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Taiga 安全漏洞
Taiga is a free open source project management tool from Taiga Open Source. A security vulnerability exists in Taiga version 8.6.1 that originates from a remote attacker who can execute arbitrary code by injecting a malicious payload into new project details...
BoidCMS 安全漏洞
BoidCMS is a free open source flat file CMS from BoidCMS Open Source for building simple websites and blogs, developed in PHP and using JSON as the database. A security vulnerability exists in BoidCMS 2.1.1 and earlier versions, which stems from a Reflected Cross-Site Scripting XSS vulnerability ...
Centreon 安全漏洞
Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems, and applications. A security vulnerability exists in Centreon that stems from a possible SQL injection when creating wo...
