127 matches found
CVE-2019-13497
CVE-2019-13497 Título del exploit: Falsificación de Solicitudes entre Sitios CSRF Fecha: 07/10/2019 Autor del exploit: Furqan Khan Página web del proveedor: https://www.oneidentity.com/ Enlace del software: https://www.oneidentity.com/products/cloud-access-manager/ Versión: 8.1.3 Probado en: Kali...
CVE-2019-13498
CVE-2019-13498 Título del Exploit: MITM - Falta de HSTS que provoca robo de credenciales y manipulación de contenido Fecha: 07/10/2019 Autor del Exploit: Furqan Khan Página web del proveedor: https://www.oneidentity.com/ Enlace del software:...
CVE-2019-13496
CVE-2019-13496 Título del exploit: Bypass de OTP verificación de integridad fallida Fecha: 07/10/2019 Autor del exploit: Furqan Khan Página principal del proveedor: https://www.oneidentity.com/ Enlace del software: https://www.oneidentity.com/products/cloud-access-manager/ Versión: 8.1.3 Probado...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Shai-Hulud / Miasma software supply chain campaign, a large scale operation that has affected numerous packages across open source ecosystems. The malicio...
PT-2026-45546
Name of the Vulnerable Software and Affected Versions Ivanti Neurons for ITSM affected versions not specified Description Improper Access Control allows a remote authenticated attacker to gain administrative access. Recommendations Audit role configurations to ensure permissions are limited to...
Tp-Link AX53 v1.0 tmpServer opcode 0x436 stack-based buffer overflow vulnerability
Talos Vulnerability Report TALOS-2025-2302 Tp-Link AX53 v1.0 tmpServer opcode 0x436 stack-based buffer overflow vulnerability May 7, 2026 CVE Number CVE-2026-30814 SUMMARY A stack-based buffer overflow vulnerability exists in the tmpServer opcode 0x436 functionality of Tp-Link AX53 v1.0 1.3.1 Bui...
CVE-2026-2286
The CrewAI framework is vulnerable to a server-side request forgery (SSRF) vulnerability. The root cause is that RAG search tools fail to properly validate URLs provided at runtime, which allows an attacker to acquire content from internal and cloud services. This could lead to unauthorized acces...
Altium Designer security vulnerabilities
Altium Designer is an electronic design automation software developed by Altium Corporation in the United States. Version 24.9.0 of Altium Designer contains a security vulnerability. This vulnerability stems from unverified self-signed server certificates connected to the cloud, which may lead to...
A Survey of Security Challenges and Solutions for UAS Traffic Management (UTM) and Small Unmanned Aerial Systems (SUAS)
The rapid growth of small Unmanned Aerial Systems sUAS for civil and commercial missions has intensified concerns about their resilience to cyber-security threats. Operating within the emerging UAS Traffic Management UTM framework, these lightweight and highly networked platforms depend on secure...
CVE-2025-65831
The application uses an insecure hashing algorithm MD5 to hash passwords. If an attacker obtained a copy of these hashes, either through exploiting cloud services, performing TLS downgrade attacks on the traffic from a mobile device, or through another means, they may be able to crack the hash in...
Code to Cloud Attacks: From Github PAT to Cloud Control Plane
How attackers are leveraging compromised employee GitHub Personal Access Tokens to compromise cloud environments...
CVE-2025-65958
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery SSRF vulnerability in Open WebUI allows any authenticated user to force the server to make HTTP requests to arbitrary URLs. This can be exploited to...
EUVD-2019-4958
Malware in sbrugna...
EUVD-2019-4957
Malware in sbrugna...