The vulnerability of the Python interpreter of the Cisco NX-OS operating system for Cisco Nexus switches allows a hacker to execute arbitrary commands.

The vulnerability of the Python interpreter in the Cisco NX-OS operating system of Cisco Nexus switches is related to a breach in the data protection mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

External Secrets 安全漏洞

External Secrets is a Kubernetes-related application open-sourced by External Secrets. A security vulnerability exists in External Secrets versions prior to 0.10.2, which stems from the ability to retrieve or gain access to all secrets across a cluster by abusing deployed SA tokens for elevated...

D-Link多款产品 安全漏洞

D-Link DI-7003G and others are a wireless router from China-based AUO D-Link. A security vulnerability exists in various D-Link products. An attacker exploiting the vulnerability can remotely execute commands. The following products and versions are affected: D-Link DI-7003G v19.12.24A1, DI-7003G...

AI Firm’s Misconfigured Server Exposed 5.3 TB of Mental Health Records

A misconfigured server from a US-based AI healthcare firm Confidant Health exposed 5.3 TB of sensitive mental health…...

gnark 安全漏洞

gnark is a fast zk-SNARK library open-sourced by Consensys. for advanced APIs to design circuits. A security vulnerability exists in versions prior to gnark 0.11.0, which stems from the fact that the implementation of the commitment to a private witness in a Groth16 proof breaks the zero-knowledg...

drug 安全漏洞

drug is a drugstore sales management system from the individual developer deathbreak. A security vulnerability exists in drug version 1.0, which stems from a cross-site scripting XSS vulnerability in the component eanManager.java, which allows an attacker to execute arbitrary web script or HTML b...

Crime Complaints Reporting Management System 1.0 Arbitrary File Upload

============================================================================================================================================= | Title : Crime Complaints Reporting Management System 1.0 arbitrary file upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro /...

RansomHub Claims Planned Parenthood Hack, Steals 93GB of Sensitive Data

RansomHub claims to have breached Intermountain Planned Parenthood, stealing 93GB of data. The healthcare provider is investigating the…...

Planned Parenthood partly offline after ransomware attack

In late August, Intermountain Planned Parenthood of Montana suffered a cyberattack which is still under investigation. The attack has been claimed by a ransomware group. Intermountain Planned Parenthood Inc., doing business as Planned Parenthood Of Montana, is a nonprofit organization that provid...

SuiteCRM 安全漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. SuiteCRM has a security vulnerability that stems from insufficient access control checks. An attacker exploited the vulnerability to delete records via the API...

MAL-2024-8799 Malicious code in rbds-frill-auth0-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 150dbdfd8f858852151c86f252e31bbb62cb7fdd4afb0babf23f9817a5a222ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8800 Malicious code in saptiya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e761bb75d4a0bad96ad666c358c5b3eccdc0f47e5e6622a536496b9ee2fa49b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsowuer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 111fb7600e81b5a50f008078826db3ae508544bb41cb3afcc72c3266cb08eab9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8743 Malicious code in biashuer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef5ebf3aa89ed9df9922874033124629a28e1f18e1aa0daae9f84b655eab3a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cap-client-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18ed3c31f0a20e7a224256d46a896df654fcaf6e60ac3f4fac7639672b320f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in Insurance Management System version 1.0. An attacker exploited the vulnerability to perform a cross-site request forgery attack...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A privilege control vulnerability exists in Huawei...

City of Columbus tries to silence security researcher

The City of Columbus, Ohio is suing a security researcher for sharing stolen data. All the complaint will accomplish, we imagine, is spotlight the ignorance of certain city officials in handling a common security matter. What happened is that the City of Columbus was attacked by a ransomware grou...

Secrets Exposed: Why Your CISO Should Worry About Slack

In the digital realm, secrets API keys, private keys, username and password combos, etc. are the keys to the kingdom. But what if those keys were accidentally left out in the open in the very tools we use to collaborate every day? A Single Secret Can Wreak Havoc Imagine this: It's a typical Tuesd...

Ex-Engineer Charged in Missouri for Failed $750,000 Bitcoin Extortion Attempt

A 57-year-old man from the U.S. state of Missouri has been arrested in connection with a failed data extortion campaign that targeted his former employer. Daniel Rhyne of Kansas City, Missouri, has been charged with one count of extortion in relation to a threat to cause damage to a protected...