128125 matches found
CVE-2025-24363 The HL7 FHIR IG publisher may potentially expose GitHub repo user and credential information
The HL7 FHIR IG publisher is a tool to take a set of inputs and create a standard FHIR IG. Prior to version 1.8.9, in CI contexts, the IG Publisher CLI uses git commands to determine the URL of the originating repo. If the repo was cloned, or otherwise set to use a repo that uses a username and...
CVE-2025-24363 The HL7 FHIR IG publisher may potentially expose GitHub repo user and credential information
The HL7 FHIR IG publisher is a tool to take a set of inputs and create a standard FHIR IG. Prior to version 1.8.9, in CI contexts, the IG Publisher CLI uses git commands to determine the URL of the originating repo. If the repo was cloned, or otherwise set to use a repo that uses a username and...
CVE-2025-24363
CVE-2025-24363 affects the HL7 FHIR IG Publisher. In versions prior to 1.8.9, the CLI in CI contexts uses git to derive the origin URL; if the repo URL includes a username/password/token, that credentialed URL can be embedded in the generated Implementation Guide, exposing credentials. Impact is ...
HL7 FHIR IG Publisher Artifacts 信息泄露漏洞
HL7 FHIR IG Publisher Artifacts is an open source tool used by Health Level Seven International to obtain a set of inputs. An information disclosure vulnerability previously existed in HL7 FHIR IG Publisher Artifacts version 1.8.9, which stemmed from the fact that if the repository had been clone...
espaimacia.cat Cross Site Scripting vulnerability OBB-4015297
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cmpentecoste.ce.gov.br Cross Site Scripting vulnerability OBB-4012826
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CISA Releases the JCDC AI Cybersecurity Collaboration Playbook and Fact Sheet
Today, CISA released the JCDC AI Cybersecurity Collaboration Playbook and Fact Sheet to foster operational collaboration among government, industry, and international partners and strengthen artificial intelligence AI cybersecurity. The playbook provides voluntary information-sharing processes...
Microsoft Releases January 2025 Security Updates
Microsoft released security updates to address vulnerabilities in multiple Microsoft products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates:...
February 4, 2025, update for Access 2016 (KB5002688)
None None...
Exploit for Missing Authorization in Themehunk Hunk_Companion
CVE-2024-9707-Poc 🌐 Description This script exploits the vul...
CISA: Security and Resiliency Guide - Outdoor Events Annex
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Cyber Incident Resource Guide for Governors
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Security and Resiliency Guide - Sports Leagues and Venues Annex
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Autonomous Ground Vehicle Security Guide: Transportation Systems Sector
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: January 2017/2nd Edition - Security Specialist Competencies: an Interagency Security Committee Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2019 Edition - Violence in the Federal Workplace: a Guide for Prevention and Response
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2019 Edition - REAL ID Act of 2005 Implementation: an Interagency Security Committee Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Security and Resiliency Guide - Lodging Annex
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...