190 matches found
blackout-public
ZoomInfo GTM Studio: 사전 동의 추적 문서 "연구자는 차단할 수 있어도 증거는 차단할 수 없다." 무슨 일이 있었나 2025년 11월 25일, ZoomInfo CEO 헨리 슈크Henry Schuck는 LinkedIn에 '개인 단위 웹사이트 방문을 식별'하는 AI 기반 플랫폼인 GTM Studio의 제품 데모를 게시했습니다. 한 보안 연구자가 GTM Studio 랜딩 페이지를 분석하여 광범위한 사전 동의 추적 인프라를 문서화했습니다. 해당 발견 사항은 CEO의 LinkedIn 게시물에 댓글로 게시되었습니다. 몇 ...
MAL-2026-11464 Malicious code in gtm-mcp-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07518fbe4f5f7d6807b80e7155b10a7f419e931302e6ee6c64b3200d6b4a6db1 lib/report.js imports childprocess, fs, https, and os and posts collected host information to a hardcoded https://hooks.zapier.com endpoint. The modu...
Malicious code in gtm-mcp-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07518fbe4f5f7d6807b80e7155b10a7f419e931302e6ee6c64b3200d6b4a6db1 lib/report.js imports childprocess, fs, https, and os and posts collected host information to a hardcoded https://hooks.zapier.com endpoint. The modu...
CVE-2026-16597
The GTM4WP – A Google Tag Manager GTM plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Billing Fields in all versions up to, and including, 1.22.3 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-16597: Improper Neutralization of Input During Web Page Generation
The GTM4WP – A Google Tag Manager GTM plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Billing Fields in all versions up to, and including, 1.22.3 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-28758
When BIG-IP DNS is provisioned, a vulnerability exists in the gtmadd and bigipadd iControl REST commands that return the ssh-password parameter in cleartext in the iControl REST response and is also logged in the audit log. This may allow a highly privileged, authenticated attacker with access to...
EUVD-2026-29959
When BIG-IP DNS is provisioned, a vulnerability exists in the gtmadd and bigipadd iControl REST commands that return the ssh-password parameter in cleartext in the iControl REST response and is also logged in the audit log. This may allow a highly privileged, authenticated attacker with access to...
CVE-2026-28758
When BIG-IP DNS is provisioned, a vulnerability exists in the gtmadd and bigipadd iControl REST commands that return the ssh-password parameter in cleartext in the iControl REST response and is also logged in the audit log. This may allow a highly privileged, authenticated attacker with access to...
CVE-2026-28758 BIG-IP iControl REST vulnerability
When BIG-IP DNS is provisioned, a vulnerability exists in the gtmadd and bigipadd iControl REST commands that return the ssh-password parameter in cleartext in the iControl REST response and is also logged in the audit log. This may allow a highly privileged, authenticated attacker with access to...
CVE-2026-28758 BIG-IP iControl REST vulnerability
When BIG-IP DNS is provisioned, a vulnerability exists in the gtmadd and bigipadd iControl REST commands that return the ssh-password parameter in cleartext in the iControl REST response and is also logged in the audit log. This may allow a highly privileged, authenticated attacker with access to...
K000158070: iControl REST vulnerability CVE-2026-28758
Security Advisory Description When BIG-IP DNS is provisioned, a vulnerability exists in the gtmadd and bigipadd iControl REST commands that return the ssh-password parameter in cleartext in the iControl REST response and is also logged in the audit log. This may allow a highly privileged,...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform developed by F5 Technologies in the United States. It integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IP has a security vulnerability. This vulnerability stems from the fact that the...
CVE-2021-22982
On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software versions which have reached End of Software Development EoSD are not evaluated...
Malicious code in epic-gtm-url-checker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3b6ddfbd2862202921c64ea326689bcf031a2b9580b6bba61e9598f6cc1586 The package epic-gtm-url-checker was found to contain malicious code...
EUVD-2025-37138
Malicious code in epic-gtm-url-checker npm...
MAL-2025-49155 Malicious code in epic-gtm-url-checker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3b6ddfbd2862202921c64ea326689bcf031a2b9580b6bba61e9598f6cc1586 The package epic-gtm-url-checker was found to contain malicious code...
EUVD-2021-10100
Malware in sbrugna...
EUVD-2025-11458
Malicious code in bioql PyPI...