19517 matches found
Malicious Package
Overview @self-sell/self-sell-amplitude-events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
Malicious Package
Overview @js-to-lua/handler-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
CVE-2525-55234
creationtimestamp| type| source ---|---|--- 2025-09-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1634...
CVE-2025-59044
creationtimestamp| type| source ---|---|--- 2025-09-10 02:14:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyh5wurhik2h...
PT-2025-37083
Name of the Vulnerable Software and Affected Versions: Cortex XDR Microsoft 365 Defender Pack affected versions not specified Description: The Cortex XDR Microsoft 365 Defender Pack may allow cleartext exposure of credentials. The severity of this issue is low. Recommendations: At the moment, the...
PT-2025-37084
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks affected versions not specified Description: The vulnerability involves the cleartext exposure of service account passwords. It is a medium-severity issue. Recommendations: At the moment, there is no information about a new...
CVE-2025-55047
creationtimestamp| type| source ---|---|--- 2025-09-09 21:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lygnu3zloo2t...
CVE-2025-7453
creationtimestamp| type| source ---|---|--- 2025-09-09 20:51:39+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...
Apache DolphinScheduler vulnerable to Alert Script Attack
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...
GHSA-3VCP-R62V-XPVG Apache DolphinScheduler vulnerable to Alert Script Attack
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue...
Command Injection
Overview Affected versions of this package are vulnerable to Command Injection due to improper input validation in the alert script check. An attacker can execute arbitrary shell commands on the server by submitting crafted input after authentication. Remediation Upgrade...
org.apache.dolphinscheduler:dolphinscheduler-alert-all (>=3.2.0, <=3.3.0-alpha), org.apache.dolphinscheduler:dolphinscheduler-alert-server (>=3.0.0-alpha, <=3.3.0-alpha) +1 more potentially affected by CVE-2024-43115 via org.apache.dolphinscheduler:dolphinscheduler-alert-script (>=3.0.0-alpha, <=3.3.0-alpha)
org.apache.dolphinscheduler:dolphinscheduler-alert-script MAVEN version =3.0.0-alpha, =3.2.0, =3.0.0-alpha, =3.0.0-alpha, =3.0.6 Source cves: CVE-2024-43115 Source advisory: SNYK:JAVA-ORGAPACHEDOLPHINSCHEDULER-12840399...
CVE-2025-54898
creationtimestamp| type| source ---|---|--- 2025-09-09 16:23:23+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0278 2025-09-09 17:06:15+00:00| seen| https://www.thezdi.com/blog/2025/9/9/the-september-2025-security-update-review 2025-09-09 17:41:21+00:00| seen|...
CVE-2025-54905
creationtimestamp| type| source ---|---|--- 2025-09-09 16:23:23+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0278 2025-09-09 17:06:15+00:00| seen| https://www.thezdi.com/blog/2025/9/9/the-september-2025-security-update-review 2025-09-09 17:51:24+00:00| seen|...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to stored cross-site scripting XSS. The vulnerability is due to malicious JavaScript being allowed in the Alert Template creation feature, which executes when the template is rendered...
CVE-2025-10084
creationtimestamp| type| source ---|---|--- 2025-09-08 07:50:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lycpswjmrd2h...
A Simple Data Exfiltration Game
Data exfiltration is a growing problem for business who face costs related to the loss of confidential data as well as potential extortion. This work presents a simple game theoretic model of network data exfiltration. In the model, the attacker chooses the exfiltration route and speed, and the...
PT-2025-36464
Name of the Vulnerable Software and Affected Versions ABB Terra AC wallbox UL40/80A versions through 1.8.32 ABB Terra AC wallbox UL32A versions through 1.8.2 ABB Terra AC wallbox MID/ CE -Terra AC MID versions through 1.8.32 ABB Terra AC wallbox MID/ CE -Terra AC Juno CE versions through 1.8.32 A...
