talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project Using with hook frameworks Pre-commit Husky Directly invoking talisman Upgradi...

Threat-Intelligence-Alerts

Alertas de Inteligencia de Amenazas Nuestro equipo de Inteligencia de Amenazas utiliza una variedad de fuentes y herramientas para monitorear informes externos y llevar a cabo una revisión diaria de esta inteligencia para identificar cambios en el panorama de amenazas que requieran acción interna...

Adobe ColdFusion - Arbitrary File Read

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary...

The vulnerability of the TableNG component of the Grafana monitoring and observation platform allows a hacker to execute arbitrary code.

The vulnerability of the TableNG component of the Grafana monitoring and observation platform is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Rockwell Automation FactoryTalk Activation Manager

RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms. This allows attackers to bypass existing security measures.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

The vulnerabilities of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server allow attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow attackers to perform spear-phishing...

The vulnerability of the wp-login.php file within the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the wp-login.php file in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-50045

A vulnerability in Unbound allows a remote attacker to bypass upstream amplification limits by querying a deeply nested name under a DNSSEC-signed parent. This triggers excessive outbound traffic per query, potentially causing a denial of service DoS. Mitigation Restrict recursive DNS access...

Johnson Controls Inc. TL280

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

Malicious code in bigops-timeline-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6a5b474ef344ddb8aa478f73099e3644817aa8a87199eaa3c46f03d27baa13 On require of bigops-timeline-ui, index.js loads./adapter.js which fetches a platform-specific binary from Cloudflare Workers hosts whose names are...

SUSE-SU-2026:3424-1 Security update for python3-pyOpenSSL

This update for python3-pyOpenSSL fixes the following issue: - CVE-2026-27448: unhandled exception in settlsextservernamecallback callback can result in connection not being cancelled and allows for possible security measure bypassing bsc1259804...

NASA Core Flight System (cFS) Health & Safety (HS) Application

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all...

The vulnerability of the print spooler driver in Windows operating systems allows attackers to disclose sensitive information that is protected by this driver.

The vulnerability of the Windows Print Spooler in operating systems related to print queues is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measure...

igloohome Smart Lock Mobile Application

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an unauthorized actor to access functions or backend services. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure...

CVE-2025-71408 NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

The vulnerability of Windows Admin Center, related to the lack of measures taken to protect the website structure, allows attackers to perform spear-phishing attacks.

The vulnerability of the Windows Admin Center management tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

The vulnerability of the Microsoft SQL Server database management system, related to overflow in dynamic memory buffers, allows attackers to disclose sensitive information that is protected by this system’s security measures.

The vulnerability of the Microsoft SQL Server database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Tycon Systems TPDIN-Monitor-WEB2 (Update A)

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could result in an attacker accessing sensitive credentials, disrupting connected infrastructure, or manipulating physical equipment, which could present a physical safety risk. 2. RECOMMENDED PRACTICES CISA recommends users take...

Siemens Mendix Runtime

SUMMARY Mendix documentation for access rules does not adequately describe the special behavior of the System.User entity, leaving developers without sufficient guidance to configure access rules securely. This documentation gap may lead application developers to unknowingly apply overly...