Cybersecurity researchers have identified two malicious packages on the npm package registry that concealed backdoor code to execute malicious commands sent from a remote server.
The packages in question – img-aws-s3-object-multipart-copy and legacyaws…
A vulnerability has been found in Linux Kernel up to 5.10.194/5.15.131/6.1.52/6.4.15/6.5.2 and classified as problematic. Affected by this vulnerability is the function hub_port_init of the component USB Handler. The manipulation leads to out-of-bounds…
I have a website with the following code:
<input class="Header–search–form-input" name="search" value="" onfocus="alert(1)" autofocus="" placeholder="put request&q…
A vulnerability, which was classified as critical, was found in Apache Apache Superset up to 4.0.1. Affected is the function version/query_to_xml/inet_server_addr/inet_client_addr. The manipulation leads to sql injection.
This vulnerability is traded …
The Iranian nation-state actor known as MuddyWater has been observed using a never-before-seen backdoor as part of a recent attack campaign, shifting away from its well-known tactic of deploying legitimate remote monitoring and management (RMM) softwar…
An advanced persistent threat (APT) group called Void Banshee has been observed exploiting a recently disclosed security flaw in the Microsoft MHTML browser engine as a zero-day to deliver an information stealer called Atlantida.
Cybersecurity firm Tre…
A vulnerability, which was classified as critical, has been found in ESET NOD32 Antivirus, Internet Security, Smart Security Premium, Security Ultimate, Endpoint Antivirus for Windows, Endpoint Security for Windows, Server Security for Windows Server, …
A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects unknown code of the component AMD GPU. The manipulation leads to improper update of reference count.
This vulnerability was named CVE-2024-41008. The attac…
A vulnerability classified as problematic has been found in Light Poll Plugin up to 1.0.0 on WordPress. This affects an unknown part of the component Answer Handler. The manipulation leads to cross-site request forgery.
This vulnerability is uniquely …
A vulnerability was found in Premium Portfolio Features for Phlox Theme up to 2.3.2 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Grid Portfolios. The manipulation leads to cross s…
