WordPress LearnPress - WordPress LMS Plugin plugin <= 4.3.2.2 - Insecure Direct Object Reference to Authenticated (Instructor+) Teacher Material Deletion vulnerability

WordPress LearnPress - WordPress LMS Plugin plugin = 4.3.2.2 - Insecure Direct Object Reference to Authenticated Instructor+ Teacher Material Deletion vulnerability discovered by Deniz Mert dennywise in WordPress Plugin LearnPress versions = 4.3.2.1...

A Practical Solution to Systematically Monitor Inconsistencies in SBOM-Based Vulnerability Scanners

Software Bill of Materials SBOM provides new opportunities for automated vulnerability identification in software products. While the industry is adopting SBOM-based Vulnerability Scanning SVS to identify vulnerabilities, we increasingly observe inconsistencies and unexpected behavior, that resul...

cyclonedx-core-java: CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection

An XML External Entity XXE injection vulnerability was found in the CycloneDX Java core library’s XML validation step where the XML Validator was not configured securely. When a specially crafted CycloneDX BOM XML is validated, external XML entities can be processed XXE, allowing an attacker to...

A Reality Check on SBOM-Based Vulnerability Management: An Empirical Study and a Path Forward

The Software Bill of Materials SBOM is a critical tool for securing the software supply chain SSC, but its practical utility is undermined by inaccuracies in both its generation and its application in vulnerability scanning. This paper presents a large-scale empirical study on 2,414 open-source...

EUVD-2025-50813

The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Starting in version 2.1.0 and prior to version 11.0.1, the XML Validator used by cyclonedx-core-java was not configured securely, making the library...

EUVD-2025-37763

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods QuerySet.filter, QuerySet.exclude, and QuerySet.get, and the class Q, are subject to SQL injection when using a suitably crafted dictionary, with dictionary expansion, as the connector argument...

GHSA-7WWX-XJ66-R44X vulnerabilities

Vulnerabilities for packages: gatekeeper, nri-prometheus, jitsucom-bulker, kapp, cert-manager-cmctl, incert, kube-bench, local-path-provisioner, redka, telegraf, sriov-network-device-plugin, scorecard, kubelet-csr-approver, mockery, ferretdb, harbor-registry, kafka-proxy, kube-state-metrics, shfm...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: gatekeeper, nri-prometheus, jitsucom-bulker, kapp, cert-manager-cmctl, incert, kube-bench, local-path-provisioner, redka, telegraf, sriov-network-device-plugin, scorecard, kubelet-csr-approver, mockery, ferretdb, harbor-registry, kafka-proxy, kube-state-metrics, shfm...

Sustaining Cyber Awareness: The Long-Term Impact of Continuous Phishing Training and Emotional Triggers

Phishing constitutes more than 90% of successful cyberattacks globally, remaining one of the most persistent threats to organizational security. Despite organizations tripling their cybersecurity budgets between 2015 and 2025, the human factor continues to pose a critical vulnerability. This stud...

SBOMVerifierGoPoC

🔍 SBOM Verifier for Go !Pythonhttps://img.shields.io/badg...

EUVD-2020-22392

Malware in sbrugna...

EUVD-2017-1701

Malware in sbrugna...

EUVD-2017-1876

Malware in sbrugna...

EUVD-2007-0121

Malware in sbrugna...

EUVD-2024-53452

Malicious code in bioql PyPI...

EUVD-2023-0732

Malicious code in bioql PyPI...

EUVD-2022-25047

Malicious code in bioql PyPI...

EUVD-2023-58334

Malicious code in bioql PyPI...

EUVD-2024-2252

Malicious code in bioql PyPI...

CISA and UK NCSC Release Joint Guidance for Securing OT Systems

CISA, in collaboration with the Federal Bureau of Investigation, the United Kingdom’s National Cyber Security Centre, and other international partners has released new joint cybersecurity guidance: Creating and Maintaining a Definitive View of Your Operational Technology OT Architecture. Building...