Malicious code in activerecord-safe-initialize (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6474 Malicious code in activerecord-safe-initialize (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in new-tricks-v-bucks-generator-free_2023-safe-ahk (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2699 Malicious code in new-tricks-v-bucks-generator-free_2023-safe-ahk (npm)

--- -= Per source details. Do not edit below this line.=-...

Safe Exam Browser Security Vulnerability

Safe Exam Browser is a secure web browser environment organized by ETH Zurich, Switzerland. It allows secure online exams. A security vulnerability exists in Safe Exam Browser for Windows versions prior to 3.6. An attacker could exploit the vulnerability to share clipboard data between the SEB...

CVE-2024-37742

CVE-2024-37742 affects Safe Exam Browser (SEB) up to version 3.5.0 on Windows, where an insecure access control flaw allows clipboard data to be shared between SEB kiosk mode and the underlying system, potentially bypassing exam controls and compromising integrity. The issue is demonstrated in mu...

CVE-2024-37742

Insecure Access Control in Safe Exam Browser SEB = 3.5.0 on Windows. The vulnerability allows an attacker to share clipboard data between the SEB kiosk mode and the underlying system, compromising exam integrity. By exploiting this flaw, an attacker can bypass exam controls and gain an unfair...

Widespread Use of Rafel RAT Puts 3.9 Billion Android Devices at Risk

The new Rafel RAT is an Android malware capable of stealing data, spy on you, and even lock your phone. Keep your Android updated, download apps safely, and avoid phishing attacks to stay secure...

Mailcow Patches Critical XSS and File Overwrite Flaws – Update NOW

Mailcow email servers faced critical vulnerabilities CVE-2024-31204 and CVE-2024-30270 allowing potential remote code execution. Update to Mailcow 2024-04 Moopril Update to patch the security holes and keep your email server safe...

CVE-2023-37898

Joplin is a free, open source note taking and to-do application. A Cross-site Scripting XSS vulnerability allows an untrusted note opened in safe mode to execute arbitrary code. packages/renderer/MarkupToHtml.ts renders note content in safe mode by surrounding it with and , without escaping any...

CVE-2023-37898 Safe mode Cross-site Scripting (XSS) vulnerability in Joplin

Joplin is a free, open source note taking and to-do application. A Cross-site Scripting XSS vulnerability allows an untrusted note opened in safe mode to execute arbitrary code. packages/renderer/MarkupToHtml.ts renders note content in safe mode by surrounding it with and , without escaping any...

CVE-2023-37898 Safe mode Cross-site Scripting (XSS) vulnerability in Joplin

Joplin is a free, open source note taking and to-do application. A Cross-site Scripting XSS vulnerability allows an untrusted note opened in safe mode to execute arbitrary code. packages/renderer/MarkupToHtml.ts renders note content in safe mode by surrounding it with and , without escaping any...

Exploit for CVE-2024-37742

CVE-2024-37742: Clipboard Exploit in SEB ≤ 3.5.0 Windows Thi...

UBUNTU-CVE-2022-48715

In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Make bnx2fcrecvframe mp safe Running tests with a debug kernel shows that bnx2fcrecvframe is modifying the percpu lport stats counters in a non-mpsafe way. Just boot a debug kernel and run the bnx2fc driver with the...

BeyondInsight Information Disclosure Vulnerability

BeyondInsight is a Privileged Access Management PAM reporting platform from BeyondTrust USA. An information disclosure vulnerability exists in BeyondInsight Password Safe, which originates from an authenticated attacker with elevated privileges who can access SSH private keys via information...

liboqs security breach

liboqs is an open source C library for quantum secure cryptographic algorithms open sourced by Open Quantum Safe. A security vulnerability exists in liboqs that stems from insufficient control flow timing...

Fedora: Security Advisory for sudo-rs (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-37153

Evmos is the Ethereum Virtual Machine EVM Hub on the Cosmos Network. There is an issue with how to liquid stake using Safe which itself is a contract. The bug only appears when there is a local state change together with an ICS20 transfer in the same function and uses the contract's balance, that...

CVE-2024-37153 Evmos's contract balance not updating correctly after interchain transaction

Evmos is the Ethereum Virtual Machine EVM Hub on the Cosmos Network. There is an issue with how to liquid stake using Safe which itself is a contract. The bug only appears when there is a local state change together with an ICS20 transfer in the same function and uses the contract's balance, that...

CVE-2024-37153

The CVE-2024-37153 issue affects Evmos (EVM hub on Cosmos). A vulnerability occurs when a local state change happens together with an ICS20 transfer within the same function, using the contract’s address as the sender in an ICS20 precompile transfer. This enables an effective “infinite money glit...