BusyBox Security Breach

BusyBox is a suite of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in BusyBox version v.1.36.1, which stems from the presence of a heap buffer overflow vulnerability...

Control iD iDSecure Security Breach

Control iD iDSecure is an ID security program from Control iD. A security vulnerability exists in Control iD iDSecure version v4.7.32.0. An attacker can bypass authentication by exploiting this vulnerability...

OwnCast Security Breach

Owncast is an open source, self-hosted, decentralized, single-user real-time video streaming and chat server. A security vulnerability exists in OwnCast version v.0.1.1, which originated from a vulnerability that allows remote attackers to obtain sensitive information or execute arbitrary code vi...

BusyBox Security Breach

BusyBox is a suite of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in BusyBox version v.1.36.1, which stems from the presence of a post-release reuse vulnerability...

BusyBox Security Breach

BusyBox is a suite of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in BusyBox version v.1.36.1, which stems from the presence of a post-release reuse vulnerability...

Usedesk Security Breach

Usedesk is a system for bookkeeping and processing applications from Usedesk, Inc. A security vulnerability exists in Usedesk versions prior to 1.7.57 that stems from the presence of a Reflected Cross Site Scripting XSS vulnerability...

ClickHouse Security Breach

ClickHouse is ClickHouse's fastest and most resource-efficient open source database for real-time applications and analytics. A security vulnerability exists in versions prior to ClickHouse 22.9.1.2603. An attacker exploited the vulnerability to cause a process crash...

Usedesk Security Breach

Usedesk is a system for bookkeeping and processing applications from Usedesk, Inc. A security vulnerability exists in Usedesk versions prior to 1.7.57 that stems from the presence of a template injection vulnerability...

PrestaShop Chronopost Official Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts, and product image zoom, among other features. A security vulnerability exists in PrestaShop Chronopost Official. An attacker can exploit...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Cross Selling in Modal Cart versions prior to 3.5.0. An attacker...

Admidio Security Breach

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums and downloads. A security vulnerability exists in Admidio v4.2.12 and earlier versions, which stems from vulnerability to cross-site scripting XSS...

Nextcloud Security Breach

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server that originated from allowing an attacker to make external storage mount points inaccessible to other...

WebsiteGuide Security Breach

WebsiteGuide is a web site navigation system. A security vulnerability exists in WebsiteGuide version v.0.2, which stems from improper privilege management. An attacker can exploit the vulnerability to gain escalated privileges via a specially crafted jwt...

Hackers Could Exploit Google Workspace and Cloud Platform for Ransomware Attacks

A set of novel attack methods has been demonstrated against Google Workspace and the Google Cloud Platform that could be potentially leveraged by threat actors to conduct ransomware, data exfiltration, and password recovery attacks. "Starting from a single compromised machine, threat actors could...

H2O Security Breach

H2O is an in-memory platform for distributed, scalable machine learning. H2O has a security vulnerability that stems from the presence of a stored cross-site scripting XSS vulnerability. An attacker can exploit the vulnerability to cause a local file inclusion...

H2O Security Breach

H2O is an in-memory platform for distributed, scalable machine learning. H2O suffers from a security vulnerability that stems from allowing an unauthorized attacker to access the S3 bucket and execute remote code...

Ray Security breach

Ray is a unified framework for scaling AI and Python applications open-sourced by ray-project. Ray has a security vulnerability that stems from a remote file inclusion LFI vulnerability in the /static/ directory. An attacker can exploit this vulnerability to read any file on the server...

Statamic Security Breach

Statamic is a powerful flat file Cms built on Laravel by Statamic USA. used to store all content, templates, assets and settings in files instead of a database. A security vulnerability exists in Statamic that stems from the possibility of uploading certain additional PHP files that look like...

SuiteCRM Security Breach

SuiteCRM is a customer relationship management system from the SuiteCRM team. A security vulnerability exists in SuiteCRM versions 7.14.x prior to 7.14.2 and 7.12.x prior to 7.12.14 that stems from the ability to upload dangerous types of files without restriction...

AMD Ryzen Security Breach

AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. AMD Ryzen suffers from a security vulnerability that stems from incorrect input validation in the SMM Supervisor that could allow an attacker with a compromised SMI handler to gain Ring0 access, which could lead to...