2321 matches found
kube-score
kube-score kube-score é uma ferramenta que realiza análise estática de código das definições de seus objetos Kubernetes. A saída é uma lista de recomendações do que você pode melhorar para tornar sua aplicação mais segura e resiliente. Você pode testar o kube-score no navegador com a...
XStream 1.4.18 - Remote Code Execution
XStream 1.4.18 is susceptible to remote code execution. An attacker can execute commands of the host by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the...
kube-score
kube-score kube-score is a tool that performs static code analysis of your Kubernetes object definitions. The output is a list of recommendations of what you can improve to make your application more secure and resilient. You can test kube-score out in the browser with the...
An analysis of incidents at Brazilian educational institutions
Introduction Because of the amount of data that can be obtained and the high impact that successful attacks may have, educational institutions are frequent targets of cybercriminals. Both public and private schools and universities rely on software for managing personally identifiable information...
Important: Red Hat Security Advisory: General availability of the satellite/iop-advisor-backend-rhel9 container image
A new satellite/iop-advisor-backend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...
Model Context Protocol Threat Modeling and Analyzing Vulnerabilities to Prompt Injection with Tool Poisoning
The Model Context Protocol MCP has rapidly emerged as a universal standard for connecting AI assistants to external tools and data sources. While MCP simplifies integration between AI applications and various services, it introduces significant security vulnerabilities, particularly on the client...
session-hijacking-practicals
session-hijacking-practicals Sess...
Johnson Controls PowerG, IQPanel and IQHub (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to read or write encrypted traffic or perform a replay attack. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...
EUVD-2021-19366
Malware in sbrugna...
EUVD-2021-19370
Malware in sbrugna...
EUVD-2021-19367
Malware in sbrugna...
EUVD-2020-29124
Malware in sbrugna...
EUVD-2022-6017
Malicious code in bioql PyPI...
EUVD-2025-10668
Malicious code in bioql PyPI...
EUVD-2023-2058
Malicious code in bioql PyPI...
EUVD-2023-28498
Malicious code in bioql PyPI...
EUVD-2024-36866
Malicious code in bioql PyPI...
PT-2025-32299 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection issue through the app contact parameter in the appsearch.php file. Recommendations: As a temporary workaround, consider...
PT-2025-32198 · Marbella · Marbella Kr8S Dashcam Ff
Name of the Vulnerable Software and Affected Versions: Marbella KR8s Dashcam FF version 2.0.8 Description: An issue exists on Marbella KR8s Dashcam FF 2.0.8 devices where video recordings, containing sensitive data such as routes, conversations, and footage, are accessible for download. This is...
PT-2025-32219 · Unknown · Vedo Suite
Name of the Vulnerable Software and Affected Versions: Vedo Suite version 2024.17 Description: The application stores credentials in clear-text within the /api vedo/configuration/config.yml file. This file contains sensitive information, including credentials, secret keys, and database informatio...