Thunderstorm

Thunderstorm You don't have 4,000 findings. You have six paths to your crown jewels. A CSPM hands you a flat, deduplicated, severity-sorted list of misconfigurations and leaves you to guess which ones matter. Thunderstorm reasons about reachability : it collects your cloud read-only, models it as...

Thunderstorm

Thunderstorm Non hai 4.000 finding. Hai sei percorsi verso i tuoi gioielli della corona. Un CSPM ti consegna una lista piatta, deduplicata e ordinata per severità di misconfigurazioni e ti lascia indovinare quali contano. Thunderstorm ragiona sulla raggiungibilità : raccoglie il tuo cloud in sola...

CVE-2026-25918

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

CVE-2026-25918: Insertion of Sensitive Information into Log File

unity-cli is a command line utility for the Unity Game Engine. Prior to 1.8.2 , the sign-package command in @rage-against-the-pixel/unity-cli logs sensitive credentials in plaintext when the --verbose flag is used. Command-line arguments including --email and --password are output via...

EUVD-2004-1843

Malware in sbrugna...

EUVD-2006-2537

Malware in sbrugna...

EUVD-2024-3551

Malicious code in bioql PyPI...

SUSE: Security Advisory (SUSE-SU-2024:3404-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution

A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the rage CLI through an attacker-controlled recipient or identity string, or to the following age APIs when the plugin feature flag is enabled: -...

GHSA-4FG7-VXC8-QX5W rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution

A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the rage CLI through an attacker-controlled recipient or identity string, or to the following age APIs when the plugin feature flag is enabled: -...

Malicious plugin names, recipients, or identities can cause arbitrary binary execution

A plugin name containing a path separator may allow an attacker to execute an arbitrary binary. Such a plugin name can be provided to the rage CLI through an attacker-controlled recipient or identity string, or an attacker-controlled plugin name via the -j flag. On UNIX systems, a directory...

openSUSE Security Advisory (SUSE-SU-2024:3404-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: rage-encryption / rage-encryption-bash-completion / etc (SUSE-SU-2024:3404-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3404-1 advisory. - Update to version 0.10.0 - CVE-2024-43806: Fixed rustix::fs::Dir iterator with the linuxraw backend tha...

SUSE-SU-2024:3404-1 Security update for rage-encryption

This update for rage-encryption fixes the following issues: - Update to version 0.10.0 - CVE-2024-43806: Fixed rustix::fs::Dir iterator with the linuxraw backend that can cause memory exhaustion. bsc1229959...

rage-encryption-0.10.0+0-3.1 on GA media (moderate)

rage-encryption-0.10.0+0-3.1 on GA media Announcement ID: openSUSE-SU-2024:14354-1 Rating: moderate Cross-References: CVE-2024-43806 CVSS scores: CVE-2024-43806 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability c...

Rage Stealer Rebranded as Angry Stealer, Now Uses Telegram Bot for Data Theft

Beware of "Angry Stealer," a new malware targeting your online accounts. This rebranded version of Rage Stealer steals…...

OPENSUSE-SU-2024:12610-1 rage-encryption-0.9.0+0-4.1 on GA media

These are all security issues fixed in the rage-encryption-0.9.0+0-4.1 package on the GA media of openSUSE Tumbleweed...

openSUSE: Security Advisory for rage (SUSE-SU-2023:4060-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4060-1 Security update for rage-encryption

This update for rage-encryption fixes the following issues: -CVE-2023-42811: chosen ciphertext attack possible against aes-gcm bsc1215657 update vendor.tar.zst to contain aes-gcm = 0.10.3 - Update to version 0.9.2+0: CI: Ensure apt repository is up-to-date before installing build deps CI: Build...

Upgraded Q -> 2 from #20 [1685526689823]

Judge has assessed an item in Issue 20 as 2 risk. The relevant finding follows: L-2 Rage quit forfeits pending claims in TokenDistributor --- The text was updated successfully, but these errors were encountered: All reactions...