984 matches found
CVE-2025-41242: Improper Limitation of a Pathname to a Restricted Directory
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...
Malicious code in 391free-cold-war-codes-xbox (npm)
The package 391free-cold-war-codes-xbox was found to contain malicious code...
MAL-2025-7004 Malicious code in 391free-cold-war-codes-xbox (npm)
The package 391free-cold-war-codes-xbox was found to contain malicious code...
Malicious code in war-robots-test-server-free-play466 (npm)
The package war-robots-test-server-free-play466 was found to contain malicious code...
Malicious code in war-robots-cost454 (npm)
The package war-robots-cost454 was found to contain malicious code...
MAL-2025-38773 Malicious code in war-robots-cost947 (npm)
The package war-robots-cost947 was found to contain malicious code...
MAL-2025-38774 Malicious code in war-robots-test-server-free-play466 (npm)
The package war-robots-test-server-free-play466 was found to contain malicious code...
Malicious code in war-robots-cost947 (npm)
The package war-robots-cost947 was found to contain malicious code...
MAL-2025-38772 Malicious code in war-robots-cost454 (npm)
The package war-robots-cost454 was found to contain malicious code...
Relative Path Traversal
Overview org.springframework:spring-beans is a package that is the basis for Spring Framework's IoC container. The BeanFactory interface provides an advanced configuration mechanism capable of managing any type of object. Affected versions of this package are vulnerable to Relative Path Traversal...
SIGINT During World War II
The NSA and GCHQ have jointly published a history of World War II SIGINT: "Secret Messengers: Disseminating SIGINT in the Second World War." This is the story of the British SLUs Special Liaison Units and the American SSOs Special Security Officers...
What to Know About Traveling to China for Business
Recent developments and an escalating trade war have made travel to cities like Beijing challenging but by no means impossible...
Taiwan Is Rushing to Make Its Own Drones Before It's Too Late
Unmanned vehicles are increasingly becoming essential weapons of war. But with a potential conflict with China looming large, Taiwan is scrambling to build a domestic drone industry from scratch...
The Everyday Security of Living with Conflict
When cyber' is used as a prefix, attention is typically drawn to the technological and spectacular aspects of war and conflict -- and, by extension, security. We offer a different approach to engaging with and understanding security in such contexts, by foregrounding the everyday -- mundane --...
CVE-2010-5063
SQL injection vulnerability in article.php in Virtual War aka VWar 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the ratearticleselect parameter...
CVE-2010-5279
article.php in Virtual War aka VWar 1.6.1 R2 allows remote attackers to cause a denial of service memory consumption via a large integer in the ratearticleselect parameter...
CVE-2010-5066
The createRandomPassword function in includes/functionscommon.php in Virtual War aka VWar 1.6.1 R2 uses a small range of values to select the seed argument for the PHP mtsrand function, which makes it easier for remote attackers to determine randomly generated passwords via a brute-force attack...
CVE-2010-5065
popup.php in Virtual War aka VWar 1.6.1 R2 allows remote attackers to bypass intended member restrictions and read news posts via a modified newsid parameter in a printnews action...
CVE-2010-5064
Multiple cross-site scripting XSS vulnerabilities in Virtual War aka VWar 1.6.1 R2 allow remote attackers to inject arbitrary web script or HTML via 1 the Additional Information field to challenge.php, the 2 Additional Information or 3 Contact information field to joinus.php, 4 the War Report fie...