69 matches found
MAL-2025-7996 Malicious code in @hey-amplify/scripts (npm)
The package @hey-amplify/scripts was found to contain malicious code...
Basecamp: Two click Account Takeover
A vulnerability was discovered in the HEY Email Android application that allowed for a two-click account takeover. Improper handling of incoming deeplinks led to the application's authorization bearer token being sent to an attacker-controlled server if the user could be tricked into clicking a...
Basecamp: Critical Data Breach - Big Data for all domains
The researcher provided an Excel sheet that appeared to be a dump of a breach database. The origin of the data entries in the database was unclear. A small number of valid HEY accounts with enabled 2FA were found, as well as a slightly larger number of other product accounts with valid passwords...
Alarm system cyberattack leaves those in need struggling to call for help
An alarm system company that allows those in need to ask for help at the touch of a button has suffered a cyberattack, causing serious disruption. Tunstall Netherlands says the attack left the control room struggling to receive distress calls from clients on Sunday November 12, 2023. Tunstall,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: kubeflow, pulumi-language-java, pulumi-language-yaml, atlantis, gitness, newrelic-infrastructure-agent, sigstore-scaffolding, flux-notification-controller, envoy-ratelimit, flux-kustomize-controller, gobuster, helm, nats, ollama, rqlite, dex, hey, ip-masq-agent,...
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, go, dynamic-localpv-provisioner, kubeflow-katib, hey, terraform-provider-sendgrid, wireguard-go, kube-state-metrics, k3d, kubeflow, terraform-provider-sendgrid-fips, restic, grpcurl, dynamic-localpv-provisioner-fips, kubeflow-fips...
GHSA-VVPX-J8F3-3W6H vulnerabilities
Vulnerabilities for packages: gke-gcloud-auth-plugin, go, dynamic-localpv-provisioner, kubeflow-katib, hey, terraform-provider-sendgrid, wireguard-go, kube-state-metrics, k3d, kubeflow, terraform-provider-sendgrid-fips, restic, grpcurl, dynamic-localpv-provisioner-fips, kubeflow-fips...
CVE-2021-38561 vulnerabilities
Vulnerabilities for packages: vt-cli, gitleaks, dynamic-localpv-provisioner, hey, terraform-provider-sendgrid, k3d, terraform-provider-sendgrid-fips, dynamic-localpv-provisioner-fips...
CVE-2021-38561 vulnerabilities
Vulnerabilities for packages: hey, terraform-provider-sendgrid, dynamic-localpv-provisioner, vt-cli, gitleaks, k3d...
GHSA-69CH-W2M2-3VJP vulnerabilities
Vulnerabilities for packages: hey, grpcurl, kubeflow, terraform-provider-sendgrid, php-fpmexporter, dynamic-localpv-provisioner, vt-cli, gitleaks, k3d...
CVE-2022-32149 vulnerabilities
Vulnerabilities for packages: hey, grpcurl, kubeflow, terraform-provider-sendgrid, php-fpmexporter, dynamic-localpv-provisioner, vt-cli, gitleaks, k3d...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: hey, grpcurl, kubeflow, terraform-provider-sendgrid, wireguard-go, kubeflow-katib, dynamic-localpv-provisioner, k3d...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow-katib, hey, terraform-provider-sendgrid, wireguard-go, kube-state-metrics, k3d, kubeflow, terraform-provider-sendgrid-fips, grpcurl, kubeflow-fips...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, kubeflow-katib, hey, terraform-provider-sendgrid, wireguard-go, kube-state-metrics, k3d, kubeflow, terraform-provider-sendgrid-fips, grpcurl, kubeflow-fips...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: hey, grpcurl, kubeflow, terraform-provider-sendgrid, wireguard-go, kubeflow-katib, dynamic-localpv-provisioner, k3d...
GHSA-H86H-8PPG-MXMH vulnerabilities
Vulnerabilities for packages: grpcurl, terraform-provider-sendgrid, k3d, hey...
GHSA-H86H-8PPG-MXMH vulnerabilities
Vulnerabilities for packages: hey, terraform-provider-sendgrid, k3d, terraform-provider-sendgrid-fips, grpcurl...
GHSA-83G2-8M93-V3W7 vulnerabilities
Vulnerabilities for packages: grpcurl, terraform-provider-sendgrid, k3d, hey...