15645 matches found
CVEsLab
CVEsLab A collection of proof-of-con...
The Role of the Cybersecurity Leader in 2022
Who does the modern CISO need to be? According to the 2021 Gartner, Inc. Market Guide for Managed Detection and Response Services, the role of the chief information security officer CISO has to change in 2022 to combat the ever-evolving modern threat landscape. Eighty-eight percent of company...
Malicious Package
Overview dependabot-terraform-action is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...
[SECURITY] [DLA 3067-1] Debian 9 Long Term Support reaching end-of-life
------------------------------------------------------------------------- Debian LTS Advisory DLA-3067-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 01, 2022 https://wiki.debian.org/LTS -...
Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers
A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence...
Malicious code in purple_team_midway_cenario_1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e78d943ca5c3b25d23aef36ac8b32d6df51c114bcae3b18f06ec806927f3bab0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5527 Malicious code in purple_team_midway_cenario_2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ad3d487e5903ccc0f83ff5af86efb150fb8a9a5fc4d6b77025442cf32983a33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5528 Malicious code in purple_team_midway_teste_cenario_1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0da74d83112d47ea6bda3eedd0cb4f78fb0fd300a9e57fc9bb567c4e97e8c320 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview horizondev is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
GHSA-M43H-HFRQ-X8WX SystemDS CPU exhaustion vulnerability
The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable variable, which, if tampered with, may lead to CPU exhaustion. As a fix, we added an upper bound and termination condition in the read and write logic. We classify it as a...
IBM Jazz Team Server HTML注入漏洞
IBM Jazz Team Server is an application server from IBM Corporation. provides base services that enable a group of tools to work together as a single logical server and includes any number of Jazz Team Server Extensions that provide tool-specific functionality.An HTML injection vulnerability exist...
IBM Jazz Team Server Cross-Site Scripting Vulnerability (CNVD-2022-51659)
IBM Jazz Team Server is an application server from IBM Corporation in the United States. provides base services that enable a group of tools to work together as a single logical server and includes any number of Jazz Team Server Extensions that provide tool-specific functionality. IBM Jazz Team...
IBM Jazz Team Server Information Disclosure Vulnerability (CNVD-2022-51658)
IBM Jazz Team Server is an application server from IBM Corporation of America. IBM Jazz Team Server provides base services that enable a group of tools to work together as a single logical server, and includes any number of Jazz Team Server Extensions that provide tool-specific functionality.An...
IBM Jazz Team Server Information Disclosure Vulnerability (CNVD-2022-51653)
IBM Jazz Team Server is an application server from IBM America, Inc. provides base services that enable a group of tools to work together as a single logical server, and includes any number of Jazz Team Server Extensions that provide tool-specific functionality.A security vulnerability exists in...
IBM Jazz Team Server Information Disclosure Vulnerability (CNVD-2022-51660)
IBM Jazz Team Server is an application server from IBM America, Inc. provides base services that enable a group of tools to work together as a single logical server and includes any number of Jazz Team Server Extensions that provide tool-specific functionality.IBM Jazz Team Server is vulnerable t...
PortlandLabs Concrete Cms Remote Code Execution Vulnerability
PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. A remote code execution vulnerability exists in PortlandLabs Concrete Cms, which stems from the ability to download zip files over HTTP and execute from those zip files, which could be...
IBM Jazz Team Server Server-side Request Forgery Vulnerability (CNVD-2022-51652)
IBM Jazz Team Server is an application server from IBM Corporation in the United States. provides base services that enable a group of tools to work together as a single logical server, and includes any number of Jazz Team Server Extensions that provide tool-specific functionality.A security...
IBM Jazz Team Server Clickjacking Vulnerability
IBM Jazz Team Server is an application server from IBM Corporation in the United States. provides base services that enable a group of tools to work together as a single logical server and includes any number of Jazz Team Server Extensions that provide tool-specific functionality. a clickjacking...
Security Vulnerabilities fixed in Firefox 102 — Mozilla
A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. This bug only affects Firefox for Linux. Other operating systems are unaffected. Session history navigations may...
