Lucene search
+L

676 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/24 12:15 a.m.7 views

CVE-2026-22585

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

9.8CVSS5.9AI score0.0043EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/24 12:15 a.m.54 views

CVE-2026-22585

CVE-2026-22585 corresponds to a vulnerability in Salesforce Marketing Cloud Engagement (CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage) where a broken or risky cryptographic algorithm enables Web Services Protocol Manipulation. The Red Hat, CIR...

9.8CVSS5.4AI score0.0043EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/24 12:15 a.m.41 views

CVE-2026-22585

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Salesforce Marketing Cloud Engagement CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, View As Webpage modules allows Web Services Protocol Manipulation. This issue affects Marketing Cloud...

0.0043EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/24 12:00 a.m.14 views

Salesforce Marketing Cloud Engagement security vulnerability

Salesforce Marketing Cloud Engagement is a digital marketing automation platform offered by the American company Salesforce. Versions of Salesforce Marketing Cloud Engagement prior to version 2026.1.21 contained security vulnerabilities. These vulnerabilities stemmed from the use of defective or...

9.8CVSS5.7AI score0.0043EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/24 12:00 a.m.25 views

Salesforce Marketing Cloud Engagement security vulnerability

Salesforce Marketing Cloud Engagement is a digital marketing automation platform offered by the American company Salesforce. Versions of Salesforce Marketing Cloud Engagement prior to version 2026.1.21 contained security vulnerabilities, which were caused by hard-coded encryption keys. These...

9.8CVSS5.7AI score0.00613EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/24 12:00 a.m.21 views

PT-2026-4543

Name of the Vulnerable Software and Affected Versions Salesforce Marketing Cloud Engagement versions prior to January 21st, 2026 Description A hard-coded cryptographic key in the CloudPages, Forward to a Friend, Profile Center, Subscription Center, Unsub Center, and View As Webpage modules allows...

9.8CVSS5.8AI score0.00613EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2026/01/24 12:00 a.m.17 views

Salesforce Marketing Cloud Engagement security vulnerability

Salesforce Marketing Cloud Engagement is a digital marketing automation platform offered by the American company Salesforce. Versions of Salesforce Marketing Cloud Engagement prior to version 2026.1.21 contained security vulnerabilities, which were caused by improper parameter separators,...

9.8CVSS5.7AI score0.00659EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/24 12:00 a.m.30 views

PT-2026-4540

Name of the Vulnerable Software and Affected Versions Salesforce Marketing Cloud Engagement versions prior to January 21st, 2026 Description Improper Neutralization of Argument Delimiters in a Command, also known as Argument Injection, in the MicrositeUrl module allows Web Services Protocol...

9.8CVSS5.8AI score0.00659EPSS
SaveExploits0References5
Packet Storm News
Packet Storm News
added 2026/01/15 12:00 a.m.42 views

Gamifying Cyber Governance: A Virtual Escape Room to Transform Cybersecurity Policy Education

Serious games are gaining popularity as effective teaching and learning tools, providing engaging, interactive, and practical experiences for students. Gamified learning experiences, such as virtual escape rooms, have emerged as powerful tools in bridging theory and practice, fostering deeper...

5.6AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/29 6:02 a.m.11 views

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager versions 6.2.3.5 and 6.2.4.2. Vulnerability Details CVEID:CVE-2025-36124 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security...

7.5CVSS8AI score0.93305EPSS
SaveExploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/16 7:00 a.m.21 views

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager versions 6.2.3.5 and 6.2.4.2. Vulnerability Details CVEID:CVE-2025-41234 DESCRIPTION: Description In Spring Framework, versions 6.0.x as of 6.0.5, versions 6.1.x and 6.2.x, an application is vulnerable to a...

9.8CVSS7.7AI score0.32257EPSS
SaveExploits8Affected Software1
Packet Storm News
Packet Storm News
added 2025/12/03 12:00 a.m.6 views

A Descriptive Model for Modelling Attacker Decision-Making in Cyber-Deception

Cyber-deception is an increasingly important defensive strategy, shaping adversarial decision making through controlled misinformation, uncertainty, and misdirection. Although game-theoretic, Bayesian, Markov decision process, and reinforcement learning models offer insight into deceptive...

6.8AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/01 7:36 a.m.7 views

Security Bulletin: Due to the use of IBM SDK, IBM Sterling Partner Engagement Manager is vulnerable to a Remote Code Execution.

Summary IBM Sterling Partner Engagement Manager uses IBM SDK within the product. Vulnerability Details CVEID:CVE-2025-50106 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that...

8.1CVSS6AI score0.01058EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/01 7:01 a.m.17 views

Security Bulletin: Due to use of quartz-jobs, IBM Sterling Partner Engagement Manager is vulnerable to a code injection.

Summary IBM Sterling Partner Engagement Managaer uses quartz-jobs, within the product CVE-2025-4447. Vulnerability Details CVEID:CVE-2023-39017 DESCRIPTION: quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component...

9.8CVSS8.5AI score0.01185EPSS
SaveExploits1Affected Software1
Schneier on Security
Schneier on Security
added 2025/11/25 12:00 p.m.18 views

Four Ways AI Is Being Used to Strengthen Democracies Worldwide

Democracy is colliding with the technologies of artificial intelligence. Judging from the audience reaction at the recent World Forum on Democracy in Strasbourg, the general expectation is that democracy will be the worse for it. We have another narrative. Yes, there are risks to democracy from A...

6.5AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2025/11/18 12:01 p.m.10 views

AI and Voter Engagement

Social media has been a familiar, even mundane, part of life for nearly two decades. It can be easy to forget it was not always that way. In 2008, social media was just emerging into the mainstream. Facebook reached 100 million users that summer. And a singular candidate was integrating social...

6.5AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/11/12 10:45 a.m.26 views

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component.

Summary Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial o...

7.5CVSS6.9AI score0.02766EPSS
SaveExploits3Affected Software1
Packet Storm News
Packet Storm News
added 2025/10/27 12:00 a.m.9 views

Victim As a Service: Designing a System for Engaging with Interactive Scammers

Pig butchering, and similar interactive online scams, lower their victims' defenses by building trust over extended periods of conversation - sometimes weeks or months. They have become increasingly public losses at least $75B by one recent study. However, because of their long-term conversationa...

6.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/10/24 2:10 p.m.126 views

factory_exploits

This repo is a...

7AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-8939

Malware in sbrugna...

7.2CVSS6.4AI score0.01709EPSS
SaveExploits3References5
Rows per page
Query Builder