NAME__________Mercari App for Android URL redirectPlatforms Affected:Mercari Mercari App for Android 5.77.0Risk Level:3.3Exploitability:UnprovenConsequences:Other DESCRIPTION__________Mercari App for Android could allow a...
NAME__________Jenkins Qualys Policy Compliance Scanning Connector Plugin information disclosurePlatforms Affected:Jenkins Qualys Policy Compliance Scanning Connector Plugin 1.0.5Risk Level:7.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins...
NAME__________Jenkins GitLab Branch Source Plugin security bypassPlatforms Affected:Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3Risk Level:5.4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Jenkins GitLab Branch Source Plugin...
NAME__________Apache Airflow information disclosurePlatforms Affected:Apache Airflow 2.8.0Risk Level:2.7Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Apache Airflow could allow a remote authenticated attacker to obtain sensitive...
NAME__________Jenkins Log Command Plugin information disclosurePlatforms Affected:Jenkins Log Command Plugin 1.0.2Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins Log Command Plugin could allow a...
NAME__________Cisco Unity Connection cross-site scriptingPlatforms Affected:Risk Level:4.8Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Cisco Unity Connection is vulnerable to cross-site scripting, caused by improper validation...
NAME__________Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches security bypassPlatforms Affected:Cisco Business 250 Series smart switches...
NAME__________Two-factor Authentication module for Drupal security bypassPlatforms Affected:Drupal Two-factor Authentication module for Drupal tfa 8.x-1.0Risk Level:5.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Two-factor Authentication module...
NAME__________Jenkins GitLab Branch Source Plugin cross-site request forgeryPlatforms Affected:Jenkins GitLab Branch Source Plugin 684.vea_fa_7c1e2fe3Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Jenkins GitLab Branch Source...
NAME__________Squid-Cache Squid denial of servicePlatforms Affected:Squid-Cache Squid 6.5Risk Level:6.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Squid-Cache Squid is vulnerable to a denial of service,...
The ransomware group known as Kasseika has become the latest to leverage the Bring Your Own Vulnerable Driver (BYOVD) attack...
A new Go-based malware loader called CherryLoader has been discovered by threat hunters in the wild to deliver additional payloads...
Hackers with links to the Kremlin are suspected to have infiltrated information technology company Hewlett Packard Enterprise's (HPE) cloud email...
New York-based global financial technology firm EquiLend says its operations have been disrupted after some systems were taken offline in...
Hewlett Packard Enterprise (HPE) disclosed today that suspected Russian hackers known as Midnight Blizzard gained access to the company's Microsoft...
The United Kingdom's National Cyber Security Centre (NCSC) warns that artificial intelligence (AI) tools will have an adverse near-term impact...
A previously unknown traffic distribution system (TDS) named 'VexTrio' has been active since at least 2017, aiding 60 affiliates in...
Hackers are constantly attempting to steal passwords, with Microsoft tracking 1,287 password attacks every second in 2022. If successful, the...
Security researchers hacked a Tesla Modem and collected awards of $722,500 on the first day of Pwn2Own Automotive 2024 for...
Over 5,300 internet-exposed GitLab instances are vulnerable to CVE-2023-7028, a zero-click account takeover flaw GitLab warned about earlier this month....
Malicious AI use will “almost certainly” drive an increase in the volume and impact of cyber-attacks over the next two...
Threat actors could soon strike after a proof-of-concept exploit was published for a critical vulnerability in managed file transfer (MFT)...
Security researchers have observed a 198% increase in browser-based phishing attacks during the latter half of 2023 compared to the...
Social media giant X (formerly Twitter) has made passkeys available as a login option for US-based users on iOS.A post...
