17145 matches found
CVE-2020-0096-StrandHogg2
Este defecto de diseño permite a un atacante mostrar su propia actividad página sobre otra aplicación, lo que puede hacer que los usuarios pierdan sus datos privados. Esta vulnerabilidad se conoce como StrandHogg 2.0 y fue revelada recientemente por la empresa de seguridad noruega Promon. Alcance...
POC-2020-8558
Resumen CVE-2020-8558 es una vulnerabilidad de Kubernetes que fue publicada porque kube-proxy inesperadamente hace que los servicios del host vinculados a localhost estén disponibles para otros en la red. Pongo énfasis en inesperadamente porque esta vulnerabilidad se debe a un defecto de diseño...
thm-cybersec-portfolio
TryHackMe Notes — Cybersecurity Portfolio Personal notes and summaries of completed TryHackMe rooms. Built as a study reference and portfolio for IT security roles. Completed Rooms | Room| Topic ---|---|--- 01| Linux Privilege Escalation| Linux privesc techniques 02| Sudo Buffer Overflow|...
CVE-2026-5953
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
CVE-2026-5953 Reflected XSS in Ceviz Informatics's Web Design
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
EUVD-2026-67723
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Ceviz Informatics Inc. Web Design allows Reflected XSS. This issue affects Web Design: through 25082026...
CVE-2026-5953
Ceviz Informatics Inc. Web Design is affected by a Reflected XSS vulnerability caused by improper input neutralization during web page generation. The issue affects versions through 25082026 . The CVSS 3.1 score is 6.1 (Medium) with a changed scope and low confidentiality/integrity impact. No rem...
Astra Linux – Vulnerability in Firefox and Thunderbird
When Responsive Design Mode was enabled, it used references to objects that had previously been freed. We assume that with sufficient effort, this could have been exploited to execute arbitrary code. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: xhci: dbc: Fixed a memory leak in xhciallocdbc If DbC is already in use, the allocated memory for the xhcidbc struct does not get freed before returning NULL, resulting in a memory leak...
Astra Linux – Vulnerability in Firefox and Thunderbird
Sandbox escape in the Responsive Design Mode component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
AI Is Learning to Write Genetic Code
This sort of research is both exciting and terrifying: The two models in question were told to generate complete genomes for a viable bacteriophage--a type of virus able to infect and replicate itself inside bacteria, destroying them from the inside. Using an existing bacteriophage as an...
Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service
Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarilybracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...
GHSA-JGVR-6X5W-HX5W Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service
Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarilybracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...
CVE-2026-8810
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...
EUVD-2026-62294
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...
CVE-2026-8810 HDD Password leakage vulnerability
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...
CVE-2026-8810
On ARM platforms, an architecture-design flaw in HDD Password handling allows an attacker to retrieve the password from UEFI variables. CVSS 6.9 MEDIUM; physical access, high complexity, low privileges required. Exploitation details not provided in the documents.
Malicious code in bcc-design-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f25ef58a44d6da495f8f9cd06686303901d391069000f5a10d09694b68241e2 [email protected] declares a postinstall script node./notify.js that runs automatically on npm install. The script performs an HTTP GET to th...
Malicious code in index-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46741db74596587c4d689ad282865566173c18913e95bacac258d20ac71da8cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits
A group of big tech firms is fighting to stop roughly 3,000 youth safety lawsuits from moving forward, and they just lost a critical procedural battle in court. The lawsuits, brought by attorneys general and families, allege that Meta, Google, ByteDance's TikTok, and Snap knew their products were...