470 matches found
SimpleHelp Detected
This is an informational notice that the scanner was able to detect a SimpleHelp instance on the target server. Note that this detection is included in the Remote Access Tools category. No source data...
CVE-2025-21842
creationtimestamp| type| source ---|---|--- 2025-03-07 10:15:45+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114120624260487340 2025-03-07 12:04:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljrxr4vhzt22 2025-03-07 12:25:47+00:00| seen| https://t.me/cvedetector/19...
MAL-2025-2206 Malicious code in @domons/test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3fb4b8817484cd6bd07e6b222ab6a29f0b7ec9655b273a41638c382e54aafb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Linux Distros Unpatched Vulnerability : CVE-2024-57795
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rxe: Remove the direct link to netdevice The similar patch in siw is in the link: https://git.kernel.org/rdma/rdma/c/16b87037b48889 This problem also...
CVE-2022-49585
In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpfastopenblackholetimeout. While reading sysctltcpfastopenblackholetimeout, it can be changed concurrently. Thus, we need to add READONCE to its readers...
GHSA-4R24-JJWM-9PFX vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2024-13849
creationtimestamp| type| source ---|---|--- 2025-02-20 12:41:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3limctgl4rq2y 2025-02-20 13:08:54+00:00| seen| https://t.me/cvedetector/18523...
MAL-2025-1388 Malicious code in zmcrypty (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee24745300aa11ed0e92813032e7269a17e9c66f73b03ac3e38e6bd613268e1c The OpenSSF Package Analysis project identified 'zmcrypty' @ 66.6.0 npm as malicious. It is considered malicious because: - The package...
CVE-2024-12013
creationtimestamp| type| source ---|---|--- 2025-02-13 16:04:31+00:00| seen| https://infosec.exchange/users/cve/statuses/113997425586155705 2025-02-13 18:50:45+00:00| seen| https://t.me/cvedetector/18037...
CVE-2025-25202
creationtimestamp| type| source ---|---|--- 2025-02-11 19:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwenfmpuu2d 2025-02-11 21:33:23+00:00| seen| https://t.me/cvedetector/17734 2025-02-11 22:07:59+00:00| published-proof-of-concept|...
Fortinet FortiPortal 安全漏洞
Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for MSPs. A security vulnerability exists in Fortinet FortiPortal that stems from improper parsing ...
DeepSeek-R1 LLM Fails Over Half of Jailbreak Attacks in Security Analysis
DeepSeek-R1 LLM fails 58% of jailbreak attacks in Qualys security analysis. Learn about the vulnerabilities, compliance concerns, and risks for enterprise adoption...
CVE-2025-20185
creationtimestamp| type| source ---|---|--- 2025-02-05 16:36:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113952253499265593 2025-02-05 17:16:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh36kj54x2h 2025-02-05 19:09:07+00:00| seen|...
DeepSeek Failed Over Half of the Jailbreak Tests by Qualys TotalAI
A comprehensive security analysis of DeepSeek 's flagship reasoning model reveals significant concerns for enterprise adoption. Introduction DeepSeek-R1, a groundbreaking Large Language Model recently released by a Chinese startup, DeepSeek, has captured the AI industry’s attention. The model...
CVE-2025-0065
creationtimestamp| type| source ---|---|--- 2025-01-28 10:23:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113905487848074528 2025-01-28 11:15:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsdbqlg7r2n 2025-01-28 12:00:20+00:00| seen|...
CVE-2025-21564
Oracle Agile PLM Framework (Oracle Supply Chain) is affected in version 9.3.6, specifically the Agile Integration Services component. The CVE entry describes an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to obtain unauthorized access to critic...
CVE-2025-21508
CVE-2025-21508 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component. Affected versions are prior to 9.2.9.0. The vulnerability allows a low-privileged, unauthenticated attacker with network access over HTTP to cause a hang or frequent crashes (complete denial ...
Malicious code in chipped (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b4d484b6a0b05dde597bbc9ba800eec0c201e3fc81387511d009ae01d5e07b3 The OpenSSF Package Analysis project identified 'chipped' @ 1.1.0 npm as malicious. It is considered malicious because: - The package communicat...
MAL-2024-12070 Malicious code in yb2bacceleratorstorefront-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d6b9ec48a872ef195c69f3ecee359b142d1f9bb683a236c67a0c96876efafd0 The OpenSSF Package Analysis project identified 'yb2bacceleratorstorefront-web' @ 1.0.0 npm as malicious. It is considered malicious because: -...