A vulnerability was found in Ankitects Anki 24.04 and classified as problematic. This issue affects some unknown processing of the component Latex. The manipulation leads to inclusion of functionality from untrusted control sphere.
The identification …
A vulnerability has been found in Enalean Tuleap Community Edition and Tuleap Enterprise Edition and classified as problematic. This vulnerability affects unknown code. The manipulation leads to preservation of permissions.
This vulnerability was name…
A vulnerability, which was classified as very critical, was found in Ankitects Anki 24.04. This affects an unknown part of the component Flashcard Handler. The manipulation leads to injection.
This vulnerability is uniquely identified as CVE-2024-2602…
Data from the Heritage Foundation containing at least half a million passwords and usernames are available online
A vulnerability, which was classified as very critical, has been found in SuperAGI. Affected by this issue is the function eval of the component LLM. The manipulation leads to code injection.
This vulnerability is handled as CVE-2024-21552. The attack…
A vulnerability classified as problematic was found in Canonical operator up to 2.14.x. Affected by this vulnerability is an unknown functionality of the component CLI. The manipulation leads to sensitive information in log files.
This vulnerability i…
To be able to know if a user is using quad9 by browsing https://on.quad9.net/, I was expecting the same technique as DNS leak test to be used (see How does dnsleaktest.com find my DNS provider).
However, it does not seem like https://on.qu…
To be able to know if a user is using quad9 by browsing https://on.quad9.net/, I was expecting the same technique as DNS leak test to be used (see How does dnsleaktest.com find my DNS provider).
However, it does not seem like https://on.qu…
The relationship between various TDSs and DNS associated with Vigorish Viper and the final landing experience for the user
A Chinese organized crime syndicate with links to money laundering and human trafficking across Southeast Asia has been using an …
A Latin America (LATAM)-based financially motivated actor codenamed FLUXROOT has been observed leveraging Google Cloud serverless projects to orchestrate credential phishing activity, highlighting the abuse of the cloud computing model for malicious pu…
