32303 matches found
GO-2025-3869 Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence
Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence...
GO-2025-3886 OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin
OliveTin OS Command Injection vulnerability in github.com/OliveTin/OliveTin...
GO-2025-3868 Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence
Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence...
GO-2025-3870 Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-plugin-confluence
Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions in github.com/mattermost/mattermost-plugin-confluence...
GO-2025-3875 Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence
Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence...
GO-2025-3873 Komari vulnerable to 2FA Authentication Bypass in github.com/komari-monitor/komari
Komari vulnerable to 2FA Authentication Bypass in github.com/komari-monitor/komari...
GO-2025-3874 Komari vulnerable to Cross-site WebSocket Hijacking in github.com/komari-monitor/komari
Komari vulnerable to Cross-site WebSocket Hijacking in github.com/komari-monitor/komari...
Intel® Xeon® 6 Processor Firmware Advisory
Summary: Potential security vulnerabilities for some Intel® Xeon® 6 Processors when using Intel® Software Guard Extensions Intel® SGX or Intel® Trust Domain Extensions Intel® TDX may allow escalation of privilege. Intel is releasing microcode updates to mitigate these potential vulnerabilities...
The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign
The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign By Pham Duy Phuc and Alex Lanstein · August 18, 2025 The Trellix Advanced Research Center uncovered a sophisticated espionage operation targeting diplomatic missions across several regions in South Korea during...
CVE-2025-55192
HomeAssistant-Tapo-Control offers Control for Tapo cameras as a Home Assistant component. Prior to commit 2a3b80f, there is a code injection vulnerability in the GitHub Actions workflow .github/workflows/issues.yml. It does not affect users of the Home Assistant integration itself — it only impac...
GHSA-GPMG-4X4G-MR5R
creationtimestamp| type| source ---|---|--- 2025-08-16 06:40:08+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3lwir5k52342l...
GHSA-XRG4-QP5W-2C3W
creationtimestamp| type| source ---|---|--- 2025-08-15 15:53:30+00:00| seen| https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3lwh7lwnkcrv2 2025-08-15 15:53:34+00:00| seen| https://infosec.exchange/users/raptor/statuses/115033584397389086...
GHSA-9X9C-GHC5-JHW9
creationtimestamp| type| source ---|---|--- 2025-08-15 15:34:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115033509822272775...
GHSA-76R7-HHXJ-R776 vulnerabilities
Vulnerabilities for packages: ruby3.4-activerecord, ruby3.2-activerecord, ruby3.3-activerecord...
GHSA-76R7-HHXJ-R776 vulnerabilities
Vulnerabilities for packages: ruby3.4-activerecord, ruby3.2-activerecord, ruby3.3-activerecord...
GHSA-F9F8-9PMF-XV68 vulnerabilities
Vulnerabilities for packages: helm-docs, trivy-operator, pluto-fips, trivy-operator-fips, flux, flux-helm-controller-fips, headlamp, k9s, linkerd2, helm-operator, helm-mapkubeapis, cluster-api-helm-controller-fips, chartmuseum, linkerd2-fips, envoy-gateway-fips, zot, rancher-fleet-fips, zarf,...
Malicious code in github-react-components (npm)
The package github-react-components was found to contain malicious code...
Malicious code in release-to-github (npm)
The package release-to-github was found to contain malicious code...