37 matches found
From Tabletop to Turnkey: Building Cyber Resilience in Financial Services
Introduction Financial institutions are facing a new reality: cyber-resilience has passed from being a best practice to an operational necessity to a prescriptive regulatory requirement. Crisis management or Tabletop exercises, for a long time relatively rare in the context of cybersecurity, have...
EUVD-2014-7443
Malware in sbrugna...
ABB Busch-Welcome 2 Wire Door Opener Actuator
SUMMARY ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could gain physical, unauthorized access to a Building where the product is installed 2. MITIGATING FACTORS ABB recommends double check...
CISA: Dams Sector Crisis Management Handbook
The Dams Sector Crisis Management Handbook 2025 introduces crisis management concepts, explains how crisis management measures are an important component of an overall risk management framework, and highlights guidelines to apply these concepts to dams and related infrastructure...
Explore practical best practices to secure your data with Microsoft Purview
According to the Microsoft 2024 Data Security Index, organizations experience an average of 156 data security incidents annually, and this cyberthreat continues to be a top concern for data security decision-makers.1 A full 82% of security decision-makers believe a comprehensive, fully integrated...
Malicious code in defi-handbook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8160c8cc94eeeb56db2b1b93ced943ad36eaba53c64c82a994bda43d14ab4dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-2503 Malicious code in defi-handbook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8160c8cc94eeeb56db2b1b93ced943ad36eaba53c64c82a994bda43d14ab4dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Schneider Electric Data Center Expert
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : Data Center Expert Vulnerability : Improper Verification of Cryptographic Signature, Missing Authentication for Critical Function 2. RISK EVALUATION Successful...
GitLab: Remove obsolete domain from handbook subdomain
Vulnerability description not provided...
OWASP Mobile Top 10
Unraveling the Key Components of the Renowned OWASP Mobile Top 10 Index The altruistic initiative, Open Network Application Defense Plan ONADP, spearheads a cluster of operations in its mission to enhance the level of software protection. A cardinal tool emerging from their efforts, The OWASP...
Over 100 WordPress Repository Plugins Affected by Shortcode-based Stored Cross-Site Scripting
On August 14, 2023, the Wordfence Threat Intelligence team began a research project to find Stored Cross-Site Scripting XSS via Shortcode vulnerabilities in WordPress repository plugins. This type of vulnerability enables threat actors with contributor-level permissions or higher to inject...
Malicious code in handbook-epub (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5edd736393f9c1bdbfd02f3d1a92f23913f61168099b0602f974509d6c91179a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3555 Malicious code in handbook-epub (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5edd736393f9c1bdbfd02f3d1a92f23913f61168099b0602f974509d6c91179a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4644 Malicious code in ml-handbook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 417c62dc3f636666a96212766829fefb0d278fe9e68d8621d050a8ffc30052f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ml-handbook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 417c62dc3f636666a96212766829fefb0d278fe9e68d8621d050a8ffc30052f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CISA Releases Guidance: TIC 3.0 Remote User Use Case
In coordination with the Office of Management and Budget OMB, the Federal Chief Information Security Officer Council FCISO Trusted Internet Connections TIC Subcommittee, and the General Services Administration, CISA has released Trusted Internet Connections 3.0 Remote User Use Case. The Remote Us...
Schneider Electric Struxureware Data Center Expert
1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: Struxureware Data Center Expert Vulnerabilities: OS Command Injection, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow remote...
handbook.spherestandards.org Cross Site Scripting vulnerability OBB-1477598
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Information_Collection_Handbook
Handbook of information collection for penetration testing...
handbook.unsw.edu.au XSS vulnerability
Open Bug Bounty ID: OBB-553436 Description| Value ---|--- Affected Website:| handbook.unsw.edu.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...