7370 matches found
📄 Snipe-IT 8.3.4 Cross Site Scripting
Snipe-IT version 8.3.4 suffers from a cross site scripting vulnerability. Product Info Snipe-IT is a free and open-source IT asset management system FOSS built on Laravel. It provides hardware asset tracking, software license management, accessories, and consumables inventory features for IT...
WordPress plugin Like-it 跨站请求伪造漏洞
WordPress Like-it plugin is an extension to add like-it functionality to WordPress blogs, allowing users to perform like-it operations on posts or comments. The WordPress Like-it plugin suffers from a cross-site request forgery vulnerability, which arises from a web application that does not...
PT-2025-47256
Name of the Vulnerable Software and Affected Versions Like-it plugin for WordPress versions prior to 2.3 Description The Like-it plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. This is caused by insufficient or incorrect nonce validation within the likeit conf function. An...
Today’s threat landscape demands a proactive OT security strategy
Today’s threat landscape demands a proactive OT security strategy By John Fokker and Mo Cashman · November 18, 2025 Overview: The operational technology OT security landscape is undergoing rapid transformation, marked by an escalation in advanced threats. As reported in Trellix’s November...
WordPress Like-it plugin <= 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by johska in WordPress Plugin Like-it versions = 2.2...
Five Plead Guilty in U.S. for Helping North Korean IT Workers Infiltrate 136 Companies
The U.S. Department of Justice DoJ on Friday announced that five individuals have pleaded guilty to assisting North Korea's illicit revenue generation schemes by enabling information technology IT worker fraud in violation of international sanctions. The five individuals are listed below - Audric...
Malicious code in epimetheus-release-it-fetch-centaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc286cddc9b68a29d158425dc814ed9cc8de7a7cdd3c89822a899de1ace22dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178975
Malicious code in exoplanet-titan-repository-release-it npm...
EUVD-2025-178776
Malicious code in ganymede-nestjs-izar-release-it npm...
EUVD-2025-176517
Malicious code in saturnology-astroinformatics-release-it-test npm...
EUVD-2025-177420
Malicious code in ora-release-it-ichnology-subscription npm...
EUVD-2025-176708
Malicious code in release-it-nova-orbit-figures npm...
EUVD-2025-177121
Malicious code in plutology-release-it-despina-arcturus npm...
EUVD-2025-176710
Malicious code in release-it-library-start-inquirer npm...
Malicious code in release-it-library-start-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348aaa3d96cbbca9efb6a3b8e5c7e01f9bfc1413dce9e60070864b028329ab09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176554
Malicious code in sagitta-schema-release-it-husky npm...
EUVD-2025-179873
Malicious code in carpo-release-it-oberon-halley npm...
Malicious code in release-it-biogeochemistry-geoarchaeology-protractor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5743b02a4835cd12ed5f2fe483d4025048b9db674a57d31bcc2707937ddca19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...