2902 matches found
Addressing Cloud Identity Risks With TotalCloud CIEM
As organizations continue to embrace multi-cloud environments, leveraging platforms such as Amazon Web Services AWS, Microsoft Azure, Google Cloud Platform GCP, and Oracle Cloud Infrastructure OCI, the complexity of cloud security has increased exponentially. In cloud environments, machines are...
MAL-2024-11705 Malicious code in setuptolos (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 89f6c10eb8edc13e9f46c33bba334822fbb3693527f3fc89714bd86adc3be1af During installation, a cryptominer is secretly installed and started. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
PT-2025-8696
Name of the Vulnerable Software and Affected Versions URI gem versions prior to 0.11.3 URI gem versions 0.12.0 through 0.12.3 URI gem versions 0.13.0 through 0.13.1 URI gem versions 1.0.0 through 1.0.2 Description The URI handling methods URI.join, URImerge, URI+ in the URI gem for Ruby have an...
Exploit for Code Injection in Rejetto Http_File_Server
POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - C...
Huawei EulerOS: Security Advisory for emacs (EulerOS-SA-2024-2435)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-8637 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2024-8096 vulnerabilities
Vulnerabilities for packages: curl...
CVE-2024-45409 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-rails-ee...
GHSA-G4GC-RH26-M3P5 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli...
GHSA-92XG-GMRQ-5C3W vulnerabilities
Vulnerabilities for packages: airflow...
MAL-2024-11676 Malicious code in pysleek (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ebcd258899197196fca41e03c7a6781f5087b42fd37c0276ae9a892bef8d4910 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...
MAL-2024-11603 Malicious code in haaahhaha (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c8c6599371614e7710276d1475abae424b77a913aed8885e7191b0db82d96e40 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...
MAL-2024-11672 Malicious code in pydllcfg (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 94960ddaf12ee1269aaab9abf1893d320ae2ff50fbd17ff4773edab18e7e3a11 Importing a module starts downloading and executing an infostealer, widely identified by AV/sandboxes. --- Category: MALICIOUS - The campaign has clearly...
CVE-2024-45311 vulnerabilities
Vulnerabilities for packages: pixi, qdrant, wash, wasmcloud, uv...
RUSTSEC-2024-0367 gix-path uses local config across repos when it is the highest scope
Summary gix-path executes git to find the path of a configuration file that belongs to the git installation itself, but mistakenly treats the local repository's configuration as system-wide if no higher scoped configuration is found. In rare cases, this causes a less trusted repository to be...
Researchers Identify Over 20 Supply Chain Vulnerabilities in MLOps Platforms
Cybersecurity researchers are warning about the security risks in the machine learning ML software supply chain following the discovery of more than 20 vulnerabilities that could be exploited to target MLOps platforms. These vulnerabilities, which are described as inherent- and implementation-bas...
MAL-2025-959 Malicious code in pytc123 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 29916930efd9b23d2db0a812c00e77dcb672c494ae1d721e2201c1006625bf43 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...
Rockwell Automation 5015 - AENFTXT
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : 5015 - AENFTXT Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service...