9957 matches found
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: envoy-ratelimit-fips, kubeflow-katib, helm-operator-fips, trillian, configmap-reload, kubernetes-csi-external-resizer, timoni, skaffold, mage, q, influx, fulcio-fips, up, nri-rabbitmq, kubernetes-dashboard-metrics-scraper, kube-logging-logging-operator,...
GHSA-236W-P7WF-5PH8 vulnerabilities
Vulnerabilities for packages: spicedb, mage, q, up, metallb-fips, git-lfs, kube-logging-logging-operator, prometheus-mysqld-exporter, kots, kube-state-metrics-fips, gostatsd, nri-kafka, boring-registry, runc, timestamp-authority, istio-pilot-discovery, wave-fips, caddy, prometheus-statsd-exporter...
How to Comply with PCI DSS 4.0 Requirements 6.4.3 and 11.6.1
The countdown to compliance is in its final stretch. With the third and final phase of PCI DSS 4.0 requirements taking effect on March 31, 2025, organizations are under increasing pressure to ensure their client-side security measures meet the new requirements. At Imperva, we’re committed to...
GHSA-G38C-WH3C-5H9R
creationtimestamp| type| source ---|---|--- 2025-02-24 12:05:45+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3liwcoiudqz2q 2025-04-02 14:16:10+00:00| seen| https://bsky.app/profile/tanfonto.wspanialy.eu.ap.brid.gy/post/3lltl6a4sptj2...
Data Leak Exposes TopSec's Role in China's Censorship-as-a-Service Operations
An analysis of a data leak from a Chinese cybersecurity company TopSec has revealed that it likely offers censorship-as-a-service solutions to prospective customers, including a state-owned enterprise in the country. Founded in 1995, TopSec ostensibly offers services such as Endpoint Detection an...
CVE-2025-0352 Rapid Response Monitoring My Security Account App Authorization Bypass Through User-Controlled Key
Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users...
Nagios XI 安全漏洞
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems, and more. A security vulnerability exists in Nagios XI version 2024R1.2.2, which stems from a tool page that does no...
Rapid Response Monitoring My Security Account App 安全漏洞
Rapid Response Monitoring My Security Account App is an account security program from Rapid Response Monitoring. A security vulnerability exists in Rapid Response Monitoring My Security Account App that stems from a failure to validate requested data modifications. An attacker exploiting this...
CVE-2024-27994
creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:51+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodsycm625...
PT-2025-7286 · Phpjabbers · Phpjabbers Hotel Booking System
Name of the Vulnerable Software and Affected Versions: PHPJabbers Hotel Booking System version 4.0 Description: A lack of rate limiting in the "Login Section, Forgot Email" feature allows attackers to send an excessive amount of reset requests for a legitimate user, leading to a possible Denial o...
The vulnerability of the Elastic Defend software’s detection, monitoring, and response mechanisms is related to insufficient handling of exceptional states, allowing attackers to trigger a service failure.
The vulnerability of the software for detecting, monitoring, and responding to Elastic Defend threats is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2024-13152
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...
CVE-2024-13152
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...
CVE-2024-13152
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BSS Software Mobuy Online Machinery Monitoring Panel allows SQL Injection. This issue affects Mobuy Online Machinery Monitoring Panel: before 2.0...
BSS Mobuy Online Machinery Monitoring Panel SQL注入漏洞
BSS Mobuy Online Machinery Monitoring Panel is a software system for online monitoring of machinery and equipment from the Turkish company BSS. A SQL injection vulnerability exists in BSS Mobuy Online Machinery Monitoring Panel versions prior to 2.0, which is caused by SQL injection from a...
PT-2025-6533
Name of the Vulnerable Software and Affected Versions BSS Software Mobuy Online Machinery Monitoring Panel versions prior to 2.0 Description The issue affects BSS Software Mobuy Online Machinery Monitoring Panel, allowing SQL Injection due to an Authorization Bypass Through User-Controlled SQL...
CVE-2024-53310
creationtimestamp| type| source ---|---|--- 2025-02-13 22:26:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113998927579207625 2025-02-13 23:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sytdf2k2h 2025-02-14 00:35:11+00:00| seen|...
CVE-2023-5122
Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing CSV data from a remote endpoint configured by an administrator. If this plugin was configured to send requests t...
CVE-2023-3010
Grafana is an open-source platform for monitoring and observability. The WorldMap panel plugin, versions before 1.0.4 contains a DOM XSS vulnerability...
CVE-2025-26473
creationtimestamp| type| source ---|---|--- 2025-02-13 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-17 2025-02-13 21:21:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113998670958991211 2025-02-13 22:16:19+00:00| seen|...