82 matches found
CVE-2025-65922
PLANKA 2.0.0 lacks X-Frame-Options and CSP frame-ancestors headers, allowing the application to be embedded within malicious iframes. While this does not lead to unintended modification of projects or tasks, it exposes users to Phishing attacks. Attackers can frame the legitimate Planka applicati...
TencentOS Server 4: mozjs (TSSA-2025:0474)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0474 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
EUVD-2018-18653
Malware in sbrugna...
EUVD-2012-1973
Malware in sbrugna...
EUVD-2014-1615
Malware in sbrugna...
EUVD-2015-2942
Malware in sbrugna...
EUVD-2020-5445
Malware in sbrugna...
EUVD-2011-3095
Malware in sbrugna...
EUVD-2013-6141
Malware in sbrugna...
Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987415)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987415 advisory. A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox 139...
EUVD-2023-33771
Malicious code in bioql PyPI...
EUVD-2022-31729
Malicious code in bioql PyPI...
EUVD-2022-31728
Malicious code in bioql PyPI...
EUVD-2023-54794
Malicious code in bioql PyPI...
EUVD-2023-40840
Malicious code in bioql PyPI...
EUVD-2024-49912
Malicious code in bioql PyPI...
⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the-Wild Exploits & More
Cybersecurity today moves at the pace of global politics. A single breach can ripple across supply chains, turn a software flaw into leverage, or shift who holds the upper hand. For leaders, this means defense isn't just a matter of firewalls and patches—it's about strategy. The strongest...
Linux Distros Unpatched Vulnerability : CVE-2017-6504
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking. CVE-2017-6504 Note that Nessus relies o...
Linux Distros Unpatched Vulnerability : CVE-2024-2609
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This...
RockyLinux 8 : thunderbird (RLSA-2025:8756)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8756 advisory. thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link CVE-2025-3909 thunderbird: Sender Spoofing via Malformed From Header in...