HashiCorp Nomad 安全漏洞

HashiCorp Nomad is a simple and flexible scheduler and orchestrator from HashiCorp USA. It is used to manage containerized and non-containerized applications at scale, both locally and in the cloud. A security vulnerability exists in HashiCorp Nomad , Nomad Enterprise versions 1.4.0 through 1.5.0...

Wondershare Dr.Fone 安全漏洞

Wondershare Dr. Fone is a mobile device toolkit software from China Wondershare Technology Wondershare. The software provides applications, transfer data, contacts, messages and other auxiliary functions for the device. A security vulnerability exists in Wondershare Dr.Fone v12.9.6. An attacker...

Saysis Starcities 安全漏洞

Saysis Starcities is an application from Saysis, Inc. A security vulnerability exists in Saysis Starcities that originates from the ability to collect arbitrary data from a public directory...

Deanonymizing OpenSea NFT Owners via Cross-Site Search Vulnerability

TLDR Recently, a cross-site search vulnerability was discovered affecting the popular NFT marketplace OpenSea. When successfully exploited, this issue allows for the deanonymization of OpenSea users by linking an IP address, a browser session, or an email in certain conditions to a specific...

feiqu 安全漏洞

feiqu Feiqu Community is a web application by the individual developer Chen Weidong chen87548081. A security vulnerability exists in feiqu feiqu-opensource, which stems from a vertical authorization vulnerability that can be exploited by an attacker to arbitrarily change the blacklisted IP...

Wasmtime 安全漏洞

Wasmtime, a Bytecode Consortium project, is a standalone wasm-optimized runtime for WebAssembly and WASI only. A security vulnerability exists in Wasmtime that stems from the presence of a directive error that would produce incorrect results...

MAL-2023-597 Malicious code in milo-cute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca097e4b102ba0c7c8c5489364e1ab73a771de2338769b2f99b7cc0d12d31ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the thermal module of the MediaTek chips, which is caused by an uncaught exception that could result in memory corruption...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a security vulnerability that stems from the fact that if ...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab, which stems from the fact that a...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a security vulnerability that stems from the possibility...

Buffalo network devices 安全漏洞

Buffalo network devices are a family of network devices from Buffalo, Japan. A security vulnerability exists in Buffalo network devices, which was discovered to contain an improper access control vulnerability...

AgileBio Electronic Lab Notebook 安全漏洞

AgileBio Electronic Lab Notebook is an editor from AgileBio Electronic. A security vulnerability exists in AgileBio Electronic Lab Notebook version v4.234 that stems from the presence of a local file inclusion vulnerability...

Hackers Exploit Containerized Environments to Steal Proprietary Data and Software

A sophisticated attack campaign dubbed SCARLETEEL is targeting containerized environments to perpetrate theft of proprietary data and software. "The attacker exploited a containerized workload and then leveraged it to perform privilege escalation into an AWS account in order to steal proprietary...

BidenCash Market Leaks 2M Credit Cards in Birthday Blitz

By Waqas As analyzed by Hackread.com, the leaked details contain over 500,000 email addresses along with credit card numbers and CVV codes in plain text. This is a post from HackRead.com Read the original post: BidenCash Market Leaks 2M Credit Cards in Birthday Blitz...

Github saleor 安全漏洞

Github saleor is a headless GraphQL commerce platform that delivers a super-fast, dynamic, personalized shopping experience. Beautiful online store, anywhere, on any device. Github saleor suffers from a security vulnerability that stems from some internal exceptions that are not handled correctly...

Saleor 安全漏洞

Github saleor is a headless GraphQL commerce platform that delivers a super-fast, dynamic, personalized shopping experience. Beautiful online store, anywhere, on any device. Saleor suffers from a security vulnerability that stems from some internal exceptions that are not handled correctly and ar...

Hewlett Packard Enterprise OneView 安全漏洞

Hewlett Packard Enterprise OneView is a software from Hewlett Packard Enterprise USA that facilitates automated device management for IT departments. A security vulnerability exists in Hewlett Packard Enterprise OneView for VMware vCenter that stems from the potential disclosure of usernames and...

Malicious code in py-grandccultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8dccfca06805bb0427ebf8ae86cbc3d64951c318fa9ac91115a9e65d69dcb16a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MV iDigital Clinic Enterprise 安全漏洞

MV iDigital Clinic Enterprise is software used for healthcare related services. A security vulnerability exists in MV iDigital Clinic Enterprise iDCE version 1.0 that stems from storing passwords in plaintext...