Linux Distros Unpatched Vulnerability : CVE-2018-25050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as problematic, has been found in Harvest Chosen up to 1.8.6. Affected by this issue is the function AbstractChosen of the...

Are Enterprises Ready for Quantum-Safe Cybersecurity?

Quantum computing threatens to undermine classical cryptography by breaking widely deployed encryption and signature schemes. This paper examines enterprise readiness for quantum-safe cybersecurity through three perspectives: i the technologist view, assessing the maturity of post-quantum...

CVE-2022-22689

CA Harvest Software Change Manager versions 13.0.3, 13.0.4, 14.0.0, and 14.0.1, contain a vulnerability in the CSV export functionality, due to insufficient input validation, that can allow a privileged user to potentially execute arbitrary code or commands...

CVE-2020-8791

The OKLOK 3.1.1 mobile companion app for Fingerprint Bluetooth Padlock FB50 2.3 allows remote attackers to submit API requests using authenticated but unauthorized tokens, resulting in IDOR issues. A remote attacker can use their own token to make unauthorized API requests on behalf of arbitrary...

CVE-2018-25050

A vulnerability, which was classified as problematic, has been found in Harvest Chosen up to 1.8.6. Affected by this issue is the function AbstractChosen of the file coffee/lib/abstract-chosen.coffee. The manipulation of the argument grouplabel leads to cross site scripting. The attack may be...

Malicious code in harvest-strategy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de22b4dfdf724c0f8cba6b9451ea1743b0a7d6be1256a89d00ec7ae20c3ef901 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3765 Malicious code in harvest-strategy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de22b4dfdf724c0f8cba6b9451ea1743b0a7d6be1256a89d00ec7ae20c3ef901 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Bandit on the Hunt: Dynamic Crawling for Cyber Threat Intelligence

Public information contains valuable Cyber Threat Intelligence CTI that is used to prevent future attacks. While standards exist for sharing this information, much appears in non-standardized news articles or blogs. Monitoring online sources for threats is time-consuming and source selection is...

Malicious code in @harvest-finance/harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062f2e97a3824c2a6e95152cfe109cfeaa5426a6153438aad07eabee03820ba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @harvest-finance/harvest-strategy-polygon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de49a90e4d6b1a88dee0473346a18e2f27d007f4bc260eb2d2b9dbcf0f12cbed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PYSEC-2025-2 uniapi version 1.0.7 contained an information harvesting script.

uniapi version 1.0.7 introduces code that would execute on import of the module and download a script from a remote URL, and would then execute the downloaded script in a thread. The downloaded script would harvest system information and POST the information to another remote URL. This code was...

Malicious code in solanacore (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

PT-2024-40533 · Microsoft +2 · Windows +2

Name of the Vulnerable Software and Affected Versions: gratient version 0.5 Description: The issue concerns a user-facing library used for generating color gradients of text, which contained obfuscated, malicious code in version 0.5. This malicious code targets Windows platforms, harvesting...

harvestmoondesign.com Cross Site Scripting vulnerability OBB-3959978

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2024-2451 Malicious code in harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25fc9c1c12e5d675118a2fac283b84b5f05476e9a35c4172ef1b3059da075e12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25fc9c1c12e5d675118a2fac283b84b5f05476e9a35c4172ef1b3059da075e12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-40896 · Microsoft +2 · Windows +2

Name of the Vulnerable Software and Affected Versions: gratient version 0.5 Description: The issue concerns malicious code embedded in the library, which targets Windows platforms. This code is capable of harvesting information and credentials from the user's system and sending them to a remote...

Should count pending harvest reward and already harvested reward as collateral credit if the collateral is WLP

Lines of code Vulnerability details Impact Should count pending harvest reward and already harvested reward as collateral credit if the collateral is WLP Proof of Concept User can use WLP as collateral, even use WLP purely as collateral to borrow fund from lending pool the collateral worth of WLP...

secondharvestfoodbank.org Cross Site Scripting vulnerability OBB-3712677

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

secondharvestmidtn.org Cross Site Scripting vulnerability OBB-3338160

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...