2324 matches found
kube-score
kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the online demo source...
XStream 1.4.18 - Remote Code Execution
XStream 1.4.18 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...
kube-score
kube-score kube-score es una herramienta que realiza análisis estático de código de sus definiciones de objetos de Kubernetes. La salida es una lista de recomendaciones sobre lo que puede mejorar para hacer su aplicación más segura y resistente. Puede probar kube-score en el navegador con la demo...
Schneider Electric NetBotz 5 750/755
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
An analysis of incidents at Brazilian educational institutions
Introduction Because of the amount of data that can be obtained and the high impact that successful attacks may have, educational institutions are frequent targets of cybercriminals. Both public and private schools and universities rely on software for managing personally identifiable information...
ShadowPickle: Evading Machine Learning Model Scanners Via Stealthy Pickle Deserialization Attacks
Model hosting hubs e.g., Hugging Face are vulnerable to supply chain attacks that enable remote code execution on trusted user environments. Attackers often distribute malicious Pre-trained ML models PTMs via model hubs. In this paper, we present novel attacks against PTMs and model hubs called...
RSLinx Classic Third-Party Vulnerability
ADVISORY SUMMARY Successful exploitation of this vulnerability can lead to a denial of service, where the application will become unresponsive and will not recover on its own. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...
Important: Red Hat Security Advisory: General availability of the satellite/iop-advisor-backend-rhel9 container image
A new satellite/iop-advisor-backend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...
Model Context Protocol Threat Modeling and Analyzing Vulnerabilities to Prompt Injection with Tool Poisoning
The Model Context Protocol MCP has rapidly emerged as a universal standard for connecting AI assistants to external tools and data sources. While MCP simplifies integration between AI applications and various services, it introduces significant security vulnerabilities, particularly on the client...
session-hijacking-practicals
session-hijacking-practicals Sess...
Johnson Controls PowerG, IQPanel and IQHub (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to read or write encrypted traffic or perform a replay attack. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...
EUVD-2021-19367
Malware in sbrugna...
EUVD-2021-19370
Malware in sbrugna...
EUVD-2021-19366
Malware in sbrugna...
EUVD-2020-29124
Malware in sbrugna...
EUVD-2023-2058
Malicious code in bioql PyPI...
EUVD-2022-6017
Malicious code in bioql PyPI...
EUVD-2023-28498
Malicious code in bioql PyPI...