195 matches found
ChainDrop supply chain compromise: Anatomy of a self-propagating worm
In this article 1. Attack chain overview 2. Mitigation and protection guidance 3. Indicators of compromise IOC 4. Microsoft Defender XDR detections 5. Advanced hunting queries 6. Learn more Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting more than 400...
CVE-2026-65313 Use of hard-coded VNC credentials in the engineering-workstation provisioning
A provisioning script used when installing HIPASE-250 formerly 250 SCALA engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied to every workstation provisioned this way, an attacker with adjacent-network access who knows the password can gain VN...
CVE-2026-65313
A provisioning script used when installing HIPASE-250 formerly 250 SCALA engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied to every workstation provisioned this way, an attacker with adjacent-network access who knows the password can gain VN...
CVE-2026-65313
HIPASE-250 (formerly 250 SCALA) engineering workstations are provisioned by a script that uses a fixed, hard-coded x11vnc password. This enables an adjacent-network attacker who knows the credential to gain VNC access to affected workstations. Affected component: the provisioning script; root cau...
CVE-2026-65313 Use of hard-coded VNC credentials in the engineering-workstation provisioning
A provisioning script used when installing HIPASE-250 formerly 250 SCALA engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied to every workstation provisioned this way, an attacker with adjacent-network access who knows the password can gain VN...
EUVD-2026-51502
A provisioning script used when installing HIPASE-250 formerly 250 SCALA engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied to every workstation provisioned this way, an attacker with adjacent-network access who knows the password can gain VN...
Arbitrary Command Injection
Overview Affected versions of this package are vulnerable to Arbitrary Command Injection via the ssh process. An attacker can execute arbitrary commands on the operator's workstation by injecting malicious OpenSSH options when the operator runs non-interactive SSH commands. Remediation There is n...
The vulnerability of the Windows operating system’s Remote Desktop Client allows a hacker to execute arbitrary code.
The vulnerability of the Windows Remote Desktop Client client regarding remote desktop workstations involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Windows operating system’s Remote Desktop Client allows a hacker to execute arbitrary code.
The vulnerability of the Windows Remote Desktop Client client regarding remote desktop workstations involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Developer Workstations Are Now Part of the Software Supply Chain
Supply chain attackers are not only trying to slip malicious code into trusted software. They are trying to steal the access that makes trusted software possible. Recently, three separate campaigns hit npm, PyPI, and Docker Hub in a 48-hour window, and all three targeted secrets from developer...
CVE-2026-34454: Insufficient Session Expiration
OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers. A regression introduced in 7.11.0 prevents OAuth2 Proxy from clearing the session cookie when rendering the sign-in page. In deployments that rely on the sign-in page as part of their logout flow, a user may be...
CVE-2026-28466 OpenClaw < 2026.2.14 - Remote Code Execution via Node Invoke Approval Bypass
OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing authenticated clients to bypass exec approval gating for system.run commands. Attackers with valid gateway credentials can inject...
CVE-2008-7320
GNOME Seahorse through 3.30 allows physically proximate attackers to read plaintext passwords by using the quickAllow dialog at an unattended workstation, if the keyring is unlocked. NOTE: this is disputed by a software maintainer because the behavior represents a design decision...
CVE-2025-64642
NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries...
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for artificial intelligence DGX Spark allows a attacker to execute arbitrary code, cause system failures, or gain unauthorized access to protected information.
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for DGX Spark AI systems is related to an unvalidated return value, which leads to the dereferencing of a zero pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code, cause service failures, o...
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for artificial intelligence DGX Spark allows a intruder to gain unauthorized access to protected information.
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for AI systems, such as DGX Spark, is related to errors in boundary removal of critical data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
EUVD-2011-4595
Malware in sbrugna...
EUVD-2012-1824
Malware in sbrugna...