Malicious code in @sporta-technology/d11-web-components.avatar (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3306 Malicious code in @sporta-technology/d11-web-components.accordion (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @sporta-technology/d11-web-components.accordion (npm)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 41 Update: chromium-135.0.7049.95-1.fc41

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 41 Update: trafficserver-9.2.10-1.fc41

Traffic Server is a high-performance building block for cloud services. It's more than just a caching proxy server; it also has support for plugins to build large scale web applications. Key features: Caching - Improve your response time, while reducing server load and bandwidth needs by caching...

Trustworthy Decentralized Autonomous Machines: a New Paradigm in Automation Economy

Decentralized Autonomous Machines DAMs represent a transformative paradigm in automation economy, integrating artificial intelligence AI, blockchain technology, and Internet of Things IoT devices to create self-governing economic agents participating in Decentralized Physical Infrastructure...

UFIDA Network Technology Corporation YonBIP Path Traversal Vulnerability

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A path traversal vulnerability exists in YonBIP, which originates from improper operation of the parameter path in the file /mobsm/common/userfile,...

There are logic flaws and vulnerabilities in the Fast Shadow APP of Beijing Shutterstock Technology Co.

Fast Shadow App is a video shooting, video editing and video making tool. A logic flaw vulnerability exists in the Fast Shadow APP of Beijing Racer Technology Limited, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in Fastfilm APP of Beijing Fastfilm Technology Co.

Fast Shadow App is a video shooting, video editing and video making tool. A denial-of-service vulnerability exists in the Fast Shadow APP of Beijing Racer Technology Company Limited, which can be exploited by attackers to cause a denial of service...

CISA: Key Secure by Demand Elements for Operational Technology Fact Sheet

This fact sheet addresses key elements for operational technology OT owners and operators to consider when purchasing digital products that automate physical processes, e.g. programmable logic controllers PLCs, human-machine interfaces HMIs, and remote terminal units RTUs. CISA strongly advises...

Wappalyzer-Next - Python library that uses Wappalyzer extension (and its fingerprints) to detect technologies

This project is a command line tool and python library that uses Wappalyzer extension and its fingerprints to detect technologies. Other projects emerged after discontinuation of the official open source project are using outdated fingerpints and lack accuracy when used on dynamic web-apps, this...

Firmware Version Change Detected (Low)

Changes in the controller firmware represent a major change in the behavior of the device and usually cause a temporary interruption of operations. An attacker could use firmware changes to add malicious code to the controller, causing it to perform harmful operations which are hard to detect. Th...

CVE-2025-30731

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Configuration. Supported versions that are affected are 12.2.3-12.2.14. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

CVE-2025-30731

Vulnerability in the Oracle Applications Technology Stack product of Oracle E-Business Suite component: Configuration. Supported versions that are affected are 12.2.3-12.2.14. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle...

Insights from the field:  Key Findings from the ICIT report on Government Cloud Security

Wiz partnered with the Institute for Critical Infrastructure Technology ICIT publishing a report around findings from a survey given to federal and state agencies, highlighting the growing importance of cloud and AI technologies, and concerns around available resources and data protections...

CVE-2025-3578

A malicious, authenticated user in Aidex, versions prior to 1.7, could list credentials of other users, create or modify existing users in the application, list credentials of users in production or development environments. In addition, it would be possible to cause bugs that would result in the...

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Co.

NC Cloud is a large enterprise digitalization platform that supports flexible deployment models of public, hybrid and proprietary clouds. A SQL injection vulnerability exists in NC Cloud of UFIDA Network Technology Corporation, which can be exploited by attackers to obtain sensitive information...

RHEL 7 : redhat-access-plugin (RHSA-2015:0840)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2015:0840 advisory. The Red Hat Support plug-in for Red Hat OpenStack is a Technology Preview feature which offers seamless integrated access to Red Hat subscription...

Russia’s Storm-2372 Hits Orgs with MFA Bypass via Device Code Phishing

Russian APT group Storm-2372 employs device code phishing to bypass Multi-Factor Authentication MFA. Targets include government, technology, finance,…...

The Pall Mall Pact and why it matters

The US State Department reportedly plans to sign an international agreement designed to govern the use of commercial spyware known as the Pall Mall Pact. The Pall Mall Pact, formally known as the Pall Mall Process, was initiated by France and the United Kingdom in February 2024. The goal of the...