GHSA-P658-8693-MHVG Tendermint Core vulnerable to Uncontrolled Resource Consumption

Description Tendermint Core v0.34.0 introduced a new way of handling evidence of misbehavior. As part of this, we added a new Timestamp field to Evidence structs. This timestamp would be calculated using the same algorithm that is used when a block is created and proposed. This algorithm relies o...

Gymshark: Subdomain takeover on 'de-headless.staging.gymshark.com'

The Gymshark subdomain https://de-headless.staging.gymshark.com/ was pointing to an unclaimed Shopify site. Because of this an attacker could claim this subdomain, via Shopify, and serve their own content. This is extremely dangerous as an attacker could serve any malicious content on this domain...

CVE-2022-36158

creationtimestamp| type| source ---|---|--- 2022-09-15 15:19:29+00:00| seen| https://t.me/truesecator/3425 2022-09-20 16:35:14+00:00| seen| https://t.me/icscert/607 2022-09-21 19:28:48+00:00| seen| https://t.me/icscert/608 2022-09-26 14:22:27+00:00| seen| https://t.me/cibsecurity/50461 2025-05-21...

Viral video drives malvertising on social media platform

This blog post was authored by Jerome Segura Viral content shared on social media is highly coveted since it gets a lot of impressions and engagement. Unfortunately, the people who push this kind of content don't always have the best of intentions. We recently identified a malvertising campaign o...

CVE-2022-36923

creationtimestamp| type| source ---|---|--- 2022-08-11 00:26:24+00:00| seen| https://t.me/cibsecurity/47898 2022-09-08 13:17:27+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6761 2022-09-30 22:29:01+00:00| published-proof-of-concept| https://t.me/MrVGunz/496 2025-12-19...

PYSEC-2022-43072

An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted tokens minted on the Chia blockchain using the CAT1 standard can be inflated to an arbitrary extent by any holder of any amount of the token. The total amount of the token can be increased as high as the...

Post-Roe Privacy

This is an excellent essay outlining the post-Roe privacy threat model. Summary: period tracking apps are largely a red herring. Taken together, this means the primary digital threat for people who take abortion pills is the actual evidence of intention stored on your phone, in the form of texts,...

Design/Logic Flaw

Akashi is an open source server implementation of the Attorney Online video game based on the Ace Attorney universe. Affected versions of Akashi are subject to a denial of service attack. An attacker can use a specially crafted evidence packet to make an illegal modification, causing a server...

CVE-2022-31135 Maliciously crafted evidence packet may cause denial of service

Akashi is an open source server implementation of the Attorney Online video game based on the Ace Attorney universe. Affected versions of Akashi are subject to a denial of service attack. An attacker can use a specially crafted evidence packet to make an illegal modification, causing a server...

CVE-2022-31135 Maliciously crafted evidence packet may cause denial of service

Akashi is an open source server implementation of the Attorney Online video game based on the Ace Attorney universe. Affected versions of Akashi are subject to a denial of service attack. An attacker can use a specially crafted evidence packet to make an illegal modification, causing a server...

Akashi 输入验证错误漏洞

Akashi is an Attorney Online 2 C++ server open-sourced by Attorney Online. Versions of Akashi prior to 1.3 suffer from an Input Validation Error vulnerability that stems from an attacker being able to make illegal modifications using a specially crafted evidence package, causing the server to cra...

Police Linked to Hacking Campaign to Frame Indian Activists

New details connect police in India to a plot to plant evidence on victims' computers that led to their arrest...

The January 6 Hearing Was a Warning

The House committee's televised hearings interrogate the Capitol attack with damning new evidence. Whether it's enough to prevent another one is uncertain...

LEAF - Linux Evidence Acquisition Framework

Linux Evidence Acquisition Framework LEAF acquires artifacts and evidence from Linux EXT4 systems, accepting user input to customize the functionality of the tool for easier scalability. Offering several modules and parameters as input, LEAF is able to use smart analysis to extract Linux artifact...

Understanding compliance platform capabilities: black box automation has its limitations

Compliance is hard. It is not a "black box" of opaque inputs and outputs, where systems and data are hidden and where users are oblivious to their inner workings. There has yet to be a product made that can magically produce all the evidence sufficient for testing and verification across the wide...

GHSA-9CG4-4F87-JHM3 Moodle XSS in attachments to evidence of prior learning

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...

Moodle XSS Vulnerability

In Moodle 3.x, XSS can occur via evidence of prior learning...

GHSA-93GJ-RG98-H7MM Moodle XSS Vulnerability

In Moodle 3.x, XSS can occur via evidence of prior learning...

Moodle XSS in attachments to evidence of prior learning

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...

Nation-State Crosshairs: Australia, India & Japan

In The Nation-State Crosshairs: Australia, India & Japan By Trellix · March 28, 2022 Today Trellix and the Center for Strategic and International Studies CSIS released a global report, In the Crosshairs: Organizations and Nation-State Cyber Threats, examining security professionals’ mindsets...