Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by porcupineyhairs porcupineyhairs Report Python : Add query to detect PAM...
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by ihsinme ihsinme Report C/C++: Command injection via wordexp Full Report...
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by sim4n6 sim4n6 Report Unsafe unpacking using shutil.unpack_archive() query and tests...
Programme HackerOne GitHub Security Lab GitHub Security Lab Submitted by porcupineyhairs porcupineyhairs Report : Add query for CWE-125 Out-of-bounds Read...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS) advisories on Tuesday, warning of...
Amid the ongoing war between Russia and Ukraine, government, agriculture, and transportation organizations located in Donetsk, Lugansk, and Crimea have...
The North Korean advanced persistent threat (APT) actor dubbed ScarCruft is using weaponized Microsoft Compiled HTML Help (CHM) files to...
The threat group tracked as REF2924 has been observed deploying previously unseen malware in its attacks aimed at entities in...
Active Directory (AD) is a powerful authentication and directory service used by organizations worldwide. With this ubiquity and power comes...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
NAME__________Discourse denial of servicePlatforms Affected:Risk Level:4.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Discourse is vulnerable to a denial of service, caused by improper allocation...
NAME__________silverstripe/graphql denial of servicePlatforms Affected:Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________silverstripe/graphql is vulnerable to a denial of service, caused by a flaw...
NAME__________Discourse server-side request forgeryPlatforms Affected:Risk Level:5.7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Discourse is vulnerable to server-side request forgery, caused by a flaw in the...
NAME__________RockOA file uploadPlatforms Affected:Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________RockOA could allow a remote authenticated attacker to upload arbitrary files, caused by improper...
NAME__________Discourse cross-site scriptingPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Discourse is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by...
NAME__________svg-sanitizer cross-site scriptingPlatforms Affected:svg-sanitizer svg-sanitizer 0.15.4Risk Level:5.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________svg-sanitizer is vulnerable to cross-site scripting, caused by improper validation of user-supplied...
NAME__________Discourse information disclosurePlatforms Affected:Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Discourse could allow a remote attacker to obtain sensitive information, caused by a flaw...
NAME__________Discourse server-side request forgeryPlatforms Affected:Risk Level:5.9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Discourse is vulnerable to server-side request forgery, caused by a flaw in the...
NAME__________Pimcore cross-site scriptingPlatforms Affected:Pimcore Pimcore 10.5.18Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Pimcore is vulnerable to cross-site scripting, caused by improper validation of user-supplied...
NAME__________RapidLoad Power-Up for Autoptimize Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress RapidLoad Power-Up for Autoptimize Plugin for WordPress 1.7.1Risk Level:6.3Exploitability:UnprovenConsequences:Gain...
NAME__________Simple Art Gallery cross-site scriptingPlatforms Affected:Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Simple Art Gallery is vulnerable to cross-site scripting, caused by improper validation...
NAME__________Discourse cross-site scriptingPlatforms Affected:Risk Level:4.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Discourse is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by...
