376 matches found
OS Command Injection
github.com/chaos-mesh/chaos-mesh is vulnerable to OS command Injection. The vulnerability is due to unsanitized input handling in the cleanTcs mutation due to user-controlled fields being passed to operating-system command execution without proper validation. An attacker can use this to perform...
OS Command Injection
github.com/chaos-mesh/chaos-mesh is vulnerable to OS command injection. The vulnerability is due to improper input validation in the cleanIptables mutation, which allows an unauthenticated in-cluster attacker to execute arbitrary commands and achieve remote code execution across the cluster...
Improper Authentication Exposure
github.com/chaos-mesh/chaos-mesh is vulnerable to improper authentication exposure. The vulnerability is due to the Chaos Controller Manager exposing an unauthenticated GraphQL debugging server to the entire Kubernetes cluster, which allows an attacker to kill arbitrary processes in any pod...
Beyond the Checkbox: How Wiz Transforms SOC 2 into a Security Powerhouse
Turning compliance chaos into continuous confidence...
Rival Hackers Dox Alleged Operators of Lumma Stealer
Rival hackers expose the alleged operators behind Lumma Stealer, a major data-theft malware, causing leaks and internal chaos that have slowed its growth...
New Chaos-C++ Ransomware Targets Windows by Wiping Data, Stealing Crypto
FortiGuard Labs reveals Chaos-C++, a new Chaos ransomware variant that deletes files over 1.3 GB instead of encrypting them and uses clipboard hijacking to steal cryptocurrency...
EUVD-2012-5451
Malware in sbrugna...
EUVD-2010-1575
Malware in sbrugna...
EUVD-2015-4398
Malware in sbrugna...
EUVD-2012-2088
Malware in sbrugna...
EUVD-2013-1919
Malware in sbrugna...
EUVD-2025-24075
Malicious code in bioql PyPI...
EUVD-2022-4234
Malicious code in bioql PyPI...
EUVD-2025-29177
Malicious code in bioql PyPI...
EUVD-2025-29178
Malicious code in bioql PyPI...
EUVD-2024-52005
Malicious code in bioql PyPI...
EUVD-2025-29175
Malicious code in bioql PyPI...
EUVD-2025-29176
Malicious code in bioql PyPI...
Stop Alert Chaos: Context Is the Key to Effective Incident Response
The Problem: Legacy SOCs and Endless Alert Noise Every SOC leader knows the feeling: hundreds of alerts pouring in, dashboards lighting up like a slot machine, analysts scrambling to keep pace. The harder they try to scale people or buy new tools, the faster the chaos multiplies. The problem is n...
SUSE CVE-2025-59358
The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service...