Personal Management System security breach

Personal Management System is a web application for managing personal data by Dariusz Personal Developer. A security vulnerability exists in Personal Management System version 1.4.64, which stems from the presence of a server-side request forgery SSRF vulnerability that causes the server to make...

HCL Nomad Security Breach

HCL Nomad is an application for using and managing the Domino application development platform in mobile devices from HCL Corporation, USA. A security vulnerability exists in HCL Nomad that stems from a possible denial-of-service vulnerability in which the HCL Nomad server does not properly handl...

Malicious code in @zitterorg/vero-rem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a008735375bde49e4f60de78d7a283dc98ea74fcc512f6f8f52c77a03100fba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7403 Malicious code in @zitterorg/veritatis-repellat-debitis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949b48724436c288b08e5c9a078233585d27e6640e8917f7527125b3cca3ebe8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7254 Malicious code in @zitterorg/laudantium-modi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e1f70a1e81f0a0dbe18bd81d28661a5fbfeea8774d20c51aa8dbeb37f7e49de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7352 Malicious code in @zitterorg/quidem-eveniet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd8d6a9544edd984219f44c5005f15ecc77b0b7f1bb4f6f60741fe2f67cb4bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Gogs Security Breach

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the GOGS team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A security vulnerability exists in Gogs version 0.13.0 and earlier...

Gogs Security Breach

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the GOGS team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A security vulnerability exists in Gogs version 0.13.0 and earlier...

Gogs Security Breach

Gogs Go Git Service is a self-service Git hosting service based on the Go language by the GOGS team, which supports creating and migrating public/private repositories, adding and deleting repository collaborators, and so on. A security vulnerability exists in Gogs version 0.13.0 and earlier...

Kaiten Security Breach

Kaiten is an employee management platform from Kaiten Inc. A security vulnerability exists in Kaiten version 57.128.8, which originates from a remote attacker who can enumerate user accounts via a crafted POST request...

Discourse Security Breach

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes community, email, and chat room features. A security vulnerability exists in Discourse that stems from the presence of stored cross-site scripting that allows an attacker to execute arbitra...

Discourse Security Breach

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes community, email and chat room features. Discourse suffers from a security vulnerability that stems from a lack of authorization checks, which allows a malicious employee user to suspend...

Discourse Security Breach

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes community, email and chat room features. Discourse suffers from a security vulnerability that stems from a carefully crafted malicious URL that degrades availability and leads to a denial o...

Aimeos Security Breach

Aimeos is an open source e-commerce framework for online stores from Aimeos Open Source. Aimeos has a security vulnerability that stems from improper access control in ai-admin-jsonadm, which allows an attacker to remove the administrator group and language environment configuration from the Aime...

Aimeos Security Breach

Aimeos is an open source e-commerce framework for online stores open-sourced by Aimeos. Aimeos has a security vulnerability that stems from ai-controller-frontend not resetting the payment status of a user's shopping cart after the user completes a purchase. The affected versions are as follows:...

CVE-2024-36994 Persistent Cross-site Scripting (XSS) in Dashboard Elements

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, a low-privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through a View and Splunk Web Bulletin Messages that could...

Devika Security Breach

Stition Devika is an advanced AI software engineer at Stition USA that understands advanced human commands, breaks them down into steps, researches relevant information, and writes code to achieve a given goal. Devika has a security vulnerability that stems from the presence of path traversal...

MAL-2024-9985 Malicious code in ethereim (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 65a3f09ab65730542a941fc66bff1686e6a48560ce8968294d99dfa453365b2a --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...

TeamViewer Confirms Security Breach by Russian Midnight Blizzard

TeamViewer reassures users after a security breach targeted an employee account. The company claims no customer data was…...

CVE-2024-30111

The CVE-2024-30111 entry concerns HCL DRYiCE AEX mobile app with a Missing Root Detection vulnerability. Connected sources (EUVD-2024-28047, NVD/NVD-like records, CVE list) indicate the vulnerability affects DRYiCE AEX v10 and is tied to rooted-device bypass, enabling unauthorized access on roote...