8974 matches found
You Didn't Get Phished — You Onboarded the Attacker
When Attackers Get Hired: Today's New Identity Crisis What if the star engineer you just hired isn't actually an employee, but an attacker in disguise? This isn't phishing; it's infiltration by onboarding. Meet "Jordan from Colorado," who has a strong resume, convincing references, a clean...
Vite 访问控制错误漏洞
Vite is a new front-end build tool from Vite Open Source. An access control error vulnerability exists in Vite versions prior to 7.1.5, prior to 7.0.7, prior to 6.3.6, and prior to 5.4.20, which stems from explicitly exposing the Vite development server to the network resulting in arbitrary HTML...
ROS-20250908-05
A vulnerability in Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK and Oracle Java SE software platform is related to incorrect input data validation in the 2D component of Oracle GraalVM. Oracle Java SE platform is related to incorrect input data validation in...
OPENSUSE-SU-2025:15533-1 kernel-devel-6.16.5-1.1 on GA media
These are all security issues fixed in the kernel-devel-6.16.5-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2025-58443
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is...
vuls
This is an open-source vulnerability scanner for Linux and FreeBSD, written in Go. It is an agentless scanner, meaning it does not require any additional software to be installed on the target systems. The scanner is designed to be easy to use and provides a simple command-line interface. The...
Garden
This is a repository for the Garden development tool, which automates workflows for Kubernetes application development and testing. The repository contains various configuration files, including .chglog/CHANGELOG.tpl.md, .circleci/config.yml, .circleci/continue-config.yml, and others. These files...
Coder 代码问题漏洞
Coder is an application from Coder Inc. that allows for the setup of development environments in public or private cloud infrastructures. A code issue vulnerability exists in Coder versions 2.24.3 and earlier and 2.25.0 through 2.25.1, which stems from mishandling of sessions and could lead to...
PT-2025-36400
Name of the Vulnerable Software and Affected Versions: FOG versions 1.5.10.1673 and below Description: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. An authentication bypass vulnerability exists, allowing an attacker to perform an unauthenticated database dum...
Malicious code in apollo-development-eridanus-babel (npm)
The package apollo-development-eridanus-babel was found to contain malicious code...
Malicious code in dione-ultra-nestjs-development (npm)
The package dione-ultra-nestjs-development was found to contain malicious code...
MAL-2025-44025 Malicious code in dione-ultra-nestjs-development (npm)
The package dione-ultra-nestjs-development was found to contain malicious code...
MAL-2025-46548 Malicious code in vortex-equinox-development-ultra (npm)
The package vortex-equinox-development-ultra was found to contain malicious code...
MAL-2025-43530 Malicious code in astrobiology-spawn-development-typeorm (npm)
The package astrobiology-spawn-development-typeorm was found to contain malicious code...
MAL-2025-43980 Malicious code in development-else-especially (npm)
The package development-else-especially was found to contain malicious code...
Malicious code in astrobiology-spawn-development-typeorm (npm)
The package astrobiology-spawn-development-typeorm was found to contain malicious code...
Malicious code in development-else-especially (npm)
The package development-else-especially was found to contain malicious code...
MAL-2025-45277 Malicious code in nashira-warp-electron-development (npm)
The package nashira-warp-electron-development was found to contain malicious code...