EUVD-2019-10109

Malware in sbrugna...

EUVD-2020-28515

Malware in sbrugna...

EUVD-2021-12630

Malware in sbrugna...

Cloudflare Vite plugin exposes secrets over the built-in dev server

Summary Note: originally posted on H1 but closed. Cross-posting over to here in abundance of caution instead of a public issue. When utilising the Cloudflare Vite plugin in its default configuration, all files are exposed by the local dev server, including files in the root directory that contain...

PT-2025-25229 · Unknown · Virtuemart

Name of the Vulnerable Software and Affected Versions: VirtueMart affected versions not specified Description: An issue exists in the Product Image section of the VirtueMart backend, where authenticated attackers can upload files with arbitrary extensions. This could potentially lead to remote co...

Researchers Uncover 20+ Configuration Risks, Including Five CVEs, in Salesforce Industry Cloud

Cybersecurity researchers have uncovered over 20 configuration-related risks affecting Salesforce Industry Cloud aka Salesforce Industries, exposing sensitive data to unauthorized internal and external parties. The weaknesses affect various components like FlexCards, Data Mappers, Integration...

PT-2022-5184

Name of the Vulnerable Software and Affected Versions NGINX Open Source versions 1.23.2 and earlier, excluding version 1.22.1 and later NGINX Open Source versions 1.22.1 and earlier NGINX Open Source Subscription before versions R2 P1 and R1 P1 NGINX Plus before versions R27 P1 and R26 P1...

SUSE-SU-2021:3887-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2021-41617: Fixed privilege escalation when AuthorizedKeysCommand/AuthorizedPrincipalsCommand are configured bsc1190975...

NMRC Advisory - KeyManager Issue in ISS RealSecure on Nokia Appliances

I N F O R M A T I O N A N A R C H Y 2 K 0 2 www.nmrc.org/InfoAnarchy Nomad Mobile Research Centre A D V I S O R Y www.nmrc.org hellNBak [email protected] 19March2002 Platforms : Nokia Appliances Application : RealSecure Network Intrusion Detection NIDS Version 6.0 Severity : Medium Synopsis...

Cyberguard FW Silliness

Hey guys, Not an extremely huge issue, however one I think worth noting. Cyberguard claims that their FW software runs atop 'hardened' versions of SCO/Unixware comes bundled w/ the FW package. However, on a default installation of the latest version of the Cyberguard FW on SCO, there are a number...