449 matches found
CVE-2023-45659
Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' account, i.e., logged in and obtained a session, an attackers' session is not terminated if the users' account password is reset. This vulnerability has been fixe...
CVE-2020-2322
Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to generate load and to generate memory leaks...
caustic (>=0.4.7, <=0.4.9), chaos-mesh (>=1.2.5, <=1.2.11) +35 more potentially affected by CVE-2025-47273 via setuptools (67.2.0)
setuptools PYPI version 67.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - caustic =0.4.7, =1.2.5, =2.0.7, =6.2.9, =0.9.4, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.3.2 and more...
caustic (>=0.4.7, <=0.4.9), chaos-mesh (>=1.2.5, <=1.2.11) +35 more potentially affected by CVE-2025-47273 via setuptools (67.2.0)
setuptools PYPI version 67.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - caustic =0.4.7, =1.2.5, =2.0.7, =6.2.9, =0.9.4, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.3.2 and more...
A Chaos Driven Metric for Backdoor Attack Detection
The advancement and adoption of Artificial Intelligence AI models across diverse domains have transformed the way we interact with technology. However, it is essential to recognize that while AI models have introduced remarkable advancements, they also present inherent challenges such as their...
‘Stupid and Dangerous’: CISA Funding Chaos Threatens Essential Cybersecurity Program
The CVE Program is the primary way software vulnerabilities are tracked. Its long-term future remains in limbo even after a last-minute renewal of the US government contract that funds it...
Malware in chaos-mesh-dashboard
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
GHSA-2C93-XXQG-54GM
creationtimestamp| type| source ---|---|--- 2025-03-21 22:17:45+00:00| seen| https://chaos.social/users/gsuberland/statuses/114202736244863531...
The Most Dangerous People on the Internet in 2024
From Elon Musk and Donald Trump to state-sponsored hackers and crypto scammers, this was the year the online agents of chaos gained ground...
Malicious code in chaos-mesh-dashboard (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf6095ca937663ecb8415c2b4660d18c29a20c3e17180bfc24555ac11284a784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12125 Malicious code in chaos-mesh-dashboard (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf6095ca937663ecb8415c2b4660d18c29a20c3e17180bfc24555ac11284a784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-53599
A cross-site scripting (XSS) vulnerability exists in the /scroll.php endpoint of LafeLabs Chaos v0.0.1 . This flaw stems from the improper neutralization of input during web page generation, which allows an attacker to execute arbitrary web scripts or HTML using a crafted payload. Such exploitati...
CVE-2024-53599
A cross-site scripting XSS vulnerability in the /scroll.php endpoint of LafeLabs Chaos v0.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2024-53599: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in the /scroll.php endpoint of LafeLabs Chaos v0.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
LafeLabs Chaos security vulnerabilities
LafeLabs Chaos is an application from LafeLabs, Inc. A security vulnerability exists in LafeLabs Chaos version 0.0.1, which stems from the presence of a Cross-Site Scripting Attack XSS vulnerability that could allow an attacker to execute arbitrary Web script or Hypertext Markup Language via a...
PT-2024-35785 · Unknown · Lafelabs Chaos
Name of the Vulnerable Software and Affected Versions: LafeLabs Chaos version 0.0.1 Description: A cross-site scripting XSS issue exists in the "/scroll.php" endpoint, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. This could potentially lead to unauthorized...
CVE-2024-53599
A cross-site scripting XSS vulnerability in the /scroll.php endpoint of LafeLabs Chaos v0.0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
Auto-Rebooting iPhones Are Causing Chaos for Cops
Plus: Hot Topic confirms a customer data breach, Germany arrests a US citizen for allegedly passing military secrets to Chinese intelligence, and more...
Key Group: another ransomware group using leaked builders
Key Group, or keygroup777, is a financially motivated ransomware group primarily targeting Russian users. The group is known for negotiating with victims on Telegram and using the Chaos ransomware builder. The first public report on Key Group's activity was released in 2023 by BI.ZONE, a...
