44 matches found
dora
dora Características Extremadamente rápido ya que utilizamos ripgrep en el backend Pasos de explotación/PoC para muchas de las claves API, lo que permite redactar un buen informe para la caza de recompensas por errores A diferencia de muchos otros buscadores de claves API, dora también muestra la...
DORA Year Two: Can Your SOC Actually See the Attack?
When the Digital Operational Resilience Act DORA became enforceable across the European Union in January 2025, it triggered an administrative sprint. Financial entities spent the first year establishing risk governance, assessing third-party service providers, updating contract clauses, and...
autotrain-advanced (>=0.7.53, <=0.7.101), dora-distil-whisper (>=0.3.6, <=0.3.8) +7 more potentially affected by CVE-2026-69112 via accelerate (0.29.3)
accelerate PYPI version 0.29.3 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autotrain-advanced =0.7.53, =0.3.6, =0.0.1a0, =0.1.0, =0.2.0, =0.1.0, =0.1.2 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-38...
autotrain-advanced (>=0.7.53, <=0.7.101), dora-distil-whisper (>=0.3.6, <=0.3.8) +7 more potentially affected by CVE-2026-69112 via accelerate (0.29.3)
accelerate PYPI version 0.29.3 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autotrain-advanced =0.7.53, =0.3.6, =0.0.1a0, =0.1.0, =0.2.0, =0.1.0, =0.1.2 Source cves: CVE-2026-69112 Source advisory:...
amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2026-9856 via transformers (4.52.1)
transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...
amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2026-5241 via transformers (4.52.1)
transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...
amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2026-4372 via transformers (4.52.1)
transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...
amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2026-4372 via transformers (4.52.1)
transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...
CVE-2026-3795
A security flaw has been discovered in doramart DoraCMS 3.0.x. Impacted is the function createFileBypath of the file /DoraCMS/server/app/router/api/v1.js. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been released to the public and may...
amdshark-ai (3.9.0), amdsharktank (3.9.0) +11 more potentially affected by CVE-2025-14929 via transformers (4.52.1)
transformers PYPI version 4.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - amdshark-ai 3.9.0 - amdsharktank 3.9.0 - dora-qwen =0.3.12rc0, =0.1.3, =1.0.0, =0.0.9, =3.6.0, =3.6.0, =0.1.3, =0.0.2, =2.0.0, =2.0.1...
EUVD-2025-138273
Malicious code in polymer-datdfadsid-dora npm...
Malicious code in polymer-datdfadsid-dora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2391ff8005197875595bd3f446b394863152251b6b323adc9af31e703cbd32f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2007-6109
Malware in sbrugna...
EUVD-2007-3974
Malware in sbrugna...
EUVD-2007-3973
Malware in sbrugna...
How Securing APIs Factors into DORA Compliance
...
Andariel Hackers Target South Korean Institutes with New Dora RAT Malware
The North Korea-linked threat actor known as Andariel has been observed using a new Golang-based backdoor called Dora RAT in its attacks targeting educational institutes, manufacturing firms, and construction businesses in South Korea. "Keylogger, Infostealer, and proxy tools on top of the backdo...
CVE-2024-28715
Cross Site Scripting vulnerability in DOraCMS v.2.18 and before allows a remote attacker to execute arbitrary code via the markdown0 function in the /app/public/apidoc/oas3/wrap-components/markdown.jsx endpoint...
