Microsoft Teams 安全漏洞

Microsoft Teams is a software from Microsoft USA for online meetings, chat, and cloud storage capabilities. A security vulnerability exists in Microsoft Teams. An attacker exploiting the vulnerability could execute code. The following products and versions are affected:Teams for D365 Remote Assis...

Interpreting Differential Privacy in Terms of Disclosure Risk

As the use of differential privacy DP becomes widespread, the development of effective tools for reasoning about the privacy guarantee becomes increasingly critical. In pursuit of this goal, we demonstrate novel relationships between DP and measures of statistical disclosure risk. We suggest how...

Malicious code in chia-dev-guides (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 346392e0fae6d3a254175cbf00c6b2ebbac781151d1eb9fe24079457e807b317 The OpenSSF Package Analysis project identified 'chia-dev-guides' @...

MAL-2025-5644 Malicious code in chia-dev-guides (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 346392e0fae6d3a254175cbf00c6b2ebbac781151d1eb9fe24079457e807b317 The OpenSSF Package Analysis project identified 'chia-dev-guides' @...

Security Bulletin: IBM Storage Ceph is vulnerable to Injection in the RHEL UBI (CVE-2023-6004)

Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. CVE-2023-6004 This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. Vulnerability Details CVEID:CVE-2023-6004 DESCRIPTION: libssh could allow a local authenticated attacker to execute...

This Week in Spring - February 11th, 2025

Hi, Spring fans! It's almost Valentine's day, and let me just say: I love the Spring community! It's such an exciting and interesting place to be. Thank you everyone for all that you do. I'm busy preparing for ConFoo, in Montreal, Canada, and for Devnexus, in Atlanta, Georgia. If you're around be...

Malicious code in aem-guides-wknd-app (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=-...

MAL-2024-11318 Malicious code in byted-guides (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in byted-guides (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in byte-guides (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11316 Malicious code in byte-guides (npm)

--- -= Per source details. Do not edit below this line.=-...

Exploit for Allocation of Resources Without Limits or Throttling in Vmware Spring_Framework

Spring CVE-2022-22970 Proof of Concept This repo contains...

Malicious code in bytes-guides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1671de27300530379441b59e870fa2d13121919510fe9f5ced2bb2a4dc2e6fe1 The OpenSSF Package Analysis project identified 'bytes-guides' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10600 Malicious code in bytes-guides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1671de27300530379441b59e870fa2d13121919510fe9f5ced2bb2a4dc2e6fe1 The OpenSSF Package Analysis project identified 'bytes-guides' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

Netscaler Upgrades and General Configuration

Introduction This document provides useful resources and links to help with upgrading NetScaler and for performing general configuration. See the best practice guides provided below to help with validating your deployment. The tools and resources section includes the Precheck Tool, which can be...

Citrix Virtual Apps and Desktops: Authentication

Introduction This article is a summary of the top support articles and Product Documents related to Citrix Virtual Apps and Desktops Authentication Methods. The most commonly used support articles and guides are below. It is recommended that all customers refer to the product documentation for...

Netscaler ADM Issues

Introduction This article provides a list of Knowledge Base resources on how to investigate, troubleshoot, and prevent the most common issues with connectivity of NetScaler Console Agent to NetScaler Console Service. Overview of the Issue NetScaler Agent helps the on-prem NetScalers to connect to...

Episode 2: Behind the Scenes of a Tailor-Made Massive Phishing Campaign Part 2

Executive Summary Last summer, we investigated a massive, global phishing campaign impersonating almost 350 legitimate companies. Our continued investigation into this expansive phishing campaign revealed leaked backend source code, shedding light on the infrastructure behind the operation. This...

podostep.fi Improper Access Control vulnerability OBB-3825203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vitakt.com Cross Site Scripting vulnerability OBB-3573452

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...