541 matches found
CVE-2024-12236
A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended security restrictions of VPC-SC. No further...
CVE-2024-12236 Use of Custom URI for media inputs with VPC-SC enabled potentially leads to data exfiltration
A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended security restrictions of VPC-SC. No further...
Malicious code in sc-case-dispute (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3357583fc362d3c84451a6e68a288423fd4adc4e767eaff6dbbcbb7045a26f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in listing-sc-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7ca721c36f92794765cd58e98883bb502ec8acf998733b4ea78773c9b7868f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-10750 Malicious code in listing-sc-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7ca721c36f92794765cd58e98883bb502ec8acf998733b4ea78773c9b7868f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sc-libraries (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e685150357e5118f6b99d29dcc954b4c5e33389fc7764e15ac72be42fbc1e27a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sc-meta-layer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8afeccfd77a3b36e9c24aa1057807ba8f2a18972791b3cbc857e3d961e60d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sc-pattern-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cbcdc7facabe72ef42307c4747ea188fbeec7c3f4f2203bfab0770204dc01c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-16090 · WordPress · Compact Wp Audio Player
Name of the Vulnerable Software and Affected Versions: Compact WP Audio Player plugin for WordPress versions up to, and including, 1.9.13 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the sc embed player shortcode. This allow...
MAL-2024-9826 Malicious code in sc-qucak (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sc-qucak (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sc-quakq (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sc-quakc (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9823 Malicious code in sc-quac (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sc-quac (npm)
--- -= Per source details. Do not edit below this line.=-...
INE Security Wins 2024 SC Excellence Award
Cary, North Carolina, 18th September 2024, CyberNewsWire...
DEBIAN-CVE-2024-46682
In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs4showopen Prior to commit 3f29cc82a84c "nfsd: split scstatus out of sctype" statesshow relied on sctype field to be of valid type before calling into a subfunction to show conten...
INE Security Named 2024 SC Awards Finalist
Cary, North Carolina, 30th August 2024, CyberNewsWire...
Tenable Security Center Multiple Vulnerabilities (TNS-2024-13)
According to its self-reported version, the Tenable Security Center running on the remote host is 6.2.1, 6.3.0 or 6.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-13 advisory. - Security Center leverages third-party software to help provide underlying...
sistemas.epagri.sc.gov.br Cross Site Scripting vulnerability OBB-3953385
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...