CVE-2024-38521

Vulnerability: CVE-2024-38521 affects Hush Line prior to version 0.1.0, with a stored XSS in the Inbox. The input is displayed using the safe Jinja2 attribute, and is not sanitized on display. Root cause (from PT-2024-28049): mis-handling of user-controlled input in the Inbox leads to stored XSS....

Malicious code in acts-as_subscribable (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_multilingual (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_publicable (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_localized (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_list_with_sti_support (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_likeable (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_liked (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_keywordable (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_explorable (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_fuzzy_search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_crafter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_commentable_with_replies (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in acts-as_better_tree (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in act-as_time_as_boolean (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in act-as_nameable (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2205 Malicious code in down_load_ebook_reincarnated_as_a_sword_manga_vol_6_by_yuu_tanaka_tomowo_maruyama_5jl7z (npm)

--- -= Per source details. Do not edit below this line.=-...

Oyster Backdoor Spreading via Trojanized Popular Software Downloads

A malvertising campaign is leveraging trojanized installers for popular software such as Google Chrome and Microsoft Teams to drop a backdoor called Oyster aka Broomstick and CleanUpLoader. That's according to findings from Rapid7, which identified lookalike websites hosting the malicious payload...

Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.15.0 release

Red Hat OpenShift Pipelines 1.15.0 has been released. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments...

The vulnerability of the microprogramming software of Schneider Electric’s Automation Servers SpaceLogic AS-P and SpaceLogic AS-B relates to the disclosure of information through registration files, allowing attackers to obtain SNMP credentials.

The vulnerability of the microprogramming software used in Schneider Electric’s Automation Servers SpaceLogic AS-P and SpaceLogic AS-B lies in the ability to disclose information through registration files. Exploiting this vulnerability can allow a malicious actor to obtain SNMP credentials...