SuiteCRM 安全漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. A security vulnerability exists in SuiteCRM version 7.12.7, which stems from the ability of an authenticated user to recover arbitrary fields in the database...

LastPass Security Breach – Hackers Steal Company’s Source Code

By Deeba Ahmed In an advisory, password manager and vault app LastPass confirmed the stealing of its internal source code and technical documents. This is a post from HackRead.com Read the original post: LastPass Security Breach - Hackers Steal Companys Source Code...

Hackers Breach LastPass Developer System to Steal Source Code

Password management service LastPass confirmed a security incident that resulted in the theft of certain source code and technical information. The security breach is said to have occurred two weeks ago, targeting its development environment. No customer data or encrypted passwords were accessed,...

RuoYi 安全漏洞

RuoYi is a back-end management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v3.8.3, which stems from a weak password vulnerability in the management system...

ABB Zenon 安全漏洞

ABB Zenon is a secure operational data management platform from ABB Switzerland. Easily connect machines, infrastructure and production assets. ABB Zenon 8.20 and prior versions have a security vulnerability that stems from a recoverable format storage password vulnerability that can be...

Mahara 安全漏洞

Mahara is a free and open source web-based ePortfolio management system from Mahara. A security vulnerability exists in Mahara. An attacker could exploit the vulnerability to gain access to secure files...

Siklu MultiHaul TG Series 安全漏洞

The Siklu MultiHaul TG Series is a series of wireless transmission devices from Siklu designed to provide a reliable high-speed data transmission solution, especially for fixed wireless access and connectivity needs in dense urban environments. A security vulnerability exists in the Siklu MultiHa...

MAL-2022-5438 Malicious code in ppp-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3416ea10c8a458911e489f49d6d066428ac7b49b5cca1f8bd39f6b80e9986eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5685 Malicious code in reactaddonscsstransitiong5rop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03d7beac15790fc32919e89f105f8e97dcebb29e228dae55f576ab5b0cb153b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4896 Malicious code in nodeech (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c76cb7ef6efc0d7bcd661dffd73969fa65d8c2707223f45777e35eca8fb4277a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5320 Malicious code in phapntomjs0prebeuilt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56919771e62bd5aeae6924cd9bb15b75bbbd477a009fe07cd8f62cf7e3ea5d43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3962 Malicious code in isnon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e1ad589c42f6fb1fa593cbdb47109e2b8310d80fe71239f38bf65cb33eae0ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jwtdecope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c2adc2e8f8aff4a1166dfe6d94d1b8a0eba3ef272ab4cb25eb854083a1f19cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3241 Malicious code in fuesjo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072a0712a88bdaa28d81339add5e6525af24eb0538e33dd3e056f3d7e222f1e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3093 Malicious code in folior (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5401d3194a416c3f044e5bee61b67f0a09743efcfbb156f912fe758b54d46c00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2651 Malicious code in eacttestrenderer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bae609264d25548a8488030968b66daddfb987e6ce67ae1bdb2754c66b9c6754 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1931 Malicious code in clispmner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da6cbc1deeb9e8625bfa8359622f41cc2c72dc3abffedda4d8bc7dbdcf32c2ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2736 Malicious code in enden (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ca676384346bd2025ecfda644b319e13ed5fdc83aa1f0489d06133e7779f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Mealie 安全漏洞

Mealie is a self-hosted recipe manager and meal planner by Hayden Individual Developers in the United States. A security vulnerability exists in Mealie version 1.0.0beta3, which stems from the use of weak passwords, allowing an attacker to gain unauthorized access to the application via a brute...

U.K. Water Supplier Hit with Clop Ransomware Attack

A U.K. water supplier suffered a disruption in its corporate IT systems Monday as a result of a cyber-attack but claims that its water supply was not affected. Meanwhile, the alleged attack perpetrator—the Clop ransomware group—claimed the attack was on another, larger water utility, which for it...