2102 matches found
Malicious code in ias-dashboard-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c5e715ecf1204e540d58dcb1f94d07ca5724d7a1a0df89b355dbe88545c5185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3666 Malicious code in ias-dashboard-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c5e715ecf1204e540d58dcb1f94d07ca5724d7a1a0df89b355dbe88545c5185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Unsophisticated Cyber Actor(s) Targeting Operational Technology
CISA is increasingly aware of unsophisticated cyber actors targeting ICS/SCADA systems within U.S. critical Infrastructure sectors Oil and Natural Gas, specifically in Energy and Transportation Systems. Although these activities often include basic and elementary intrusion techniques, the presenc...
Abnormal Network Behavior Detected (Critical)
Abnormal network behavior by unexpected assets can indicate reconnaissance of the network by a potential attacker. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
Security Misconfiguration Detected (Medium)
Security misconfigurations present a risk of increased attack surface by allowing malicious entities to communicate with the target assets. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Device Presence Anomaly Detected (Low)
It is important to know what assets exist in your network. New assets can indicate unexpected network connections, third-party connectivity, or potential threats to the network. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Security Misconfiguration Detected (High)
Security misconfigurations present a risk of increased attack surface by allowing malicious entities to communicate with the target assets. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Abnormal Network Behavior Detected (Low)
Abnormal network behavior by unexpected assets can indicate reconnaissance of the network by a potential attacker. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
Abnormal Network Behavior Detected (High)
Abnormal network behavior by unexpected assets can indicate reconnaissance of the network by a potential attacker. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
Introducing Rapid7’s Exposure Assessment Platform Buyer’s Guide
Cybersecurity threats are evolving at an unprecedented pace, making it imperative for organizations to stay ahead of attackers with proactive security measures. To help organizations navigate this rapidly changing threat landscape, we are excited to introduce the Exposure Assessment Platform EAP...
CBL Mariner 2.0 Security Update: telegraf (CVE-2025-30215)
The version of telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-30215 advisory. - NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system. In...
Trustworthy Decentralized Autonomous Machines: a New Paradigm in Automation Economy
Decentralized Autonomous Machines DAMs represent a transformative paradigm in automation economy, integrating artificial intelligence AI, blockchain technology, and Internet of Things IoT devices to create self-governing economic agents participating in Decentralized Physical Infrastructure...
CVE-2025-30215
A flaw was found in NATS-SERVER. In affected versions of NATS-SERVER, the management of JetStream assets happens with messages in the $JS. subject namespace in the system account; this is partially exposed into regular accounts to allow account holders to manage their assets. Some JS API requests...
CVE-2025-30215
CVE-2025-30215 affects NATS-Server. In versions 2.2.0 through just before 2.10.27 and 2.11.1, the management of JetStream assets via the $JS namespace in the system account was partially exposed to regular accounts. This allowed certain JS API requests with management permissions in any account t...
Top Crypto Wallets of 2025: Balancing Security and Convenience
Crypto software wallets are invincible in the micro range. If you own multiple crypto assets, you need safe and reliable wallets, too...
Incorrect Authorization
Overview org.webjars.npm:vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Incorrect Authorization via the bypass of the server.fs.deny restriction. An attacker can access restricted files by appending ?.svg with ?.wasm?init or with sec-fetch-dest...
CVE-2025-31486 Vite allows server.fs.deny to be bypassed with .svg or relative paths
Vite is a frontend tooling framework for javascript. The contents of arbitrary files can be returned to the browser. By adding ?.svg with ?.wasm?init or with sec-fetch-dest: script header, the server.fs.deny restriction was able to bypass. This bypass is only possible if the file is smaller than...
CVE-2025-2908
The exposure of credentials in the call forwarding configuration module in MeetMe products in versions prior to 2024-09 allows an attacker to gain access to some important assets via configuration files...
CVE-2025-2908
The exposure of credentials in the call forwarding configuration module in MeetMe products in versions prior to 2024-09 allows an attacker to gain access to some important assets via configuration files...
MeetMe 安全漏洞
MeetMe is a dating software from MeetMe, Inc. A security vulnerability exists in versions prior to MeetMe 2024-09, which stems from a call forwarding configuration module credential disclosure that could allow access to critical assets via configuration files...