Tag: vulnerability

Nuclei: Open-source vulnerability scanner - Help Net Security

https://www.helpnetsecurity.com/2024/08/26/nuclei-open-source-vulnerability-scanner/

Nuclei is a fast and customizable open-source vulnerability scanner powered by YAML-based templates. With its flexible templating system, Nuclei can be

cyber import-20250527224135 scanning security vulnerability

Added 1 month ago

EUCLEAK - NinjaLab

https://ninjalab.io/eucleak/

Download the Writeup Illustration Romain Flamand – Flamingo Studio – [email protected] Abstract Secure elements are small microcontrollers whose main purpose is to generate/store secrets and then execute cryptographic operations. They undergo the highest level of security evaluations that exists (Common Criteria) and are often considered inviolable, even in the worst-case attack scenarios. Hence, complex secure […]

hardware import-20250527224135 mfa security vulnerability

Added 1 month ago

OXO vulnerability scanning orchestrator for the modern age

https://oxo.ostorlab.co/

OXO is a vulnerability scanning orchestrator that automatically binds tools together allowing for rapid scale.

application security import-20250527224135 orchestration scanning vulnerability

Added 1 month ago

CISA extends funding to ensure 'no lapse in critical CVE services'

https://www.bleepingcomputer.com/news/security/cisa-extends-funding-to-ensure-no-lapse-in-critical-cve-services/

CISA says the U.S. government has extended MITRE's funding to ensure no continuity issues with the critical Common Vulnerabilities and Exposures (CVE) program.

cyber import-20250527224135 management security vulnerability

Added 1 month ago

OpenVAS - OpenVAS - Open Vulnerability Assessment System

http://www.openvas.org/

import-20250527224135 scanning security vulnerability

Added 1 month ago

https://archive.md/wy1Wt

import-20250527224135 vulnerability website

Added 1 month ago

Critical AWS Vulnerabilities Allow S3 Attack Bonanza

https://www.darkreading.com/remote-workforce/critical-aws-vulnerabilities-allow-s3-attack-bonanza

aws import-20250527224135 s3 security vulnerability

Added 1 month ago

Critical doomsday Linux bug is CUPS-based vulnerability • The Register

https://www.theregister.com/2024/09/26/unauthenticated_rce_bug_linux/

No patches yet, can be mitigated, requires user interaction

cyber import-20250527224135 linux security vulnerability

Added 1 month ago

Open Source Firewall pfsense Vulnerable to Remote Code Execution Attacks

https://cybersecuritynews.com/open-source-firewall-pfsense-vulnerable/

A vulnerability in the popular open-source firewall software pfSense has been identified, allowing for remote code execution (RCE) attacks.

import-20250527224135 pfsense security vulnerability

Added 1 month ago

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials - The GitHub Blog

https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/

Critical authentication bypass vulnerabilities were discovered in ruby-saml up to version 1.17.0. See how they were uncovered.

import-20250527224135 open source saml security sso vulnerability

Added 1 month ago

OpenSSH Backdoors

https://blog.isosceles.com/openssh-backdoors/

Imagine this: an OpenSSH backdoor is discovered, maintainers rush to push out a fixed release package, security researchers trade technical details on mailing lists to analyze the backdoor code. Speculation abounds on the attribution and motives of the attacker, and the tech media pounces on the story. A near miss

history import-20250527224135 ssh vulnerability

Added 1 month ago

Spotify’s Vulnerability Management Platform - Spotify Engineering : Spotify

https://engineering.atspotify.com/2022/11/spotifys-vulnerability-management-platform/

We started developing our vulnerability management platform (VMP) at Spotify in Q2, 2020, and now that we’ve implemented it and use the system in our day-to-day work, we wanted to take a moment to share our journey to help reduce security risks in an efficient and scalable manner.

import-20250527224135 management security vulnerability

Added 1 month ago

CVE program faces swift end after DHS fails to renew contract. Leaving security flaw tracking in limbo

https://www.csoonline.com/article/3963190/cve-program-faces-swift-end-after-dhs-fails-to-renew-contract-leaving-security-flaw-tracking-in-limbo.html

After DHS did not renew its funding contract for reasons unspecified, MITRE’s 25-year-old Common Vulnerabilities and Exposures (CVE) program was slated for an abrupt shutdown on April 16, which would have left security flaw tracking in limbo. CISA stepped in to provide a bridge.

cyber import-20250527224135 management security vulnerability

Added 1 month ago

Remote Code Execution Vulnerabilities in Ingress NGINX | Wiz Blog

https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities

cyber import-20250527224135 ingress k8s security vulnerability

Added 1 month ago

CVE Foundation

https://www.thecvefoundation.org/home

The Common Vulnerabilities and Exposures (CVE) Program has become the cornerstone of vulnerability management. Nearly all technology vendors and service providers identify vulnerabilities with CVEs when they publish security advisories. Most security products and services related to vulnerabilities

cyber import-20250527224135 management security vulnerability

Added 1 month ago

AI-hallucinated code dependencies become new supply chain risk

https://www.bleepingcomputer.com/news/security/ai-hallucinated-code-dependencies-become-new-supply-chain-risk/

A new class of supply chain attacks named 'slopsquatting' has emerged from the increased use of generative AI tools for coding and the model's tendency to "hallucinate" non-existent package names.

ai code dependencies import-20250527224135 supply chain vulnerability

Added 1 month ago

OpenSSF Adds Minder as a Sandbox Project to Simplify the Integration and Use of Open Source Security

https://openssf.org/blog/2024/10/28/openssf-adds-minder-as-a-sandbox-project-to-simplify-the-integration-and-use-of-open-source-security-tools/

cyber import-20250527224135 management open source security vulnerability

Added 1 month ago

Google Claims World First As AI Finds 0-Day Security Vulnerability

https://www.forbes.com/sites/daveywinder/2024/11/04/google-claims-world-first-as-ai-finds-0-day-security-vulnerability/

Google’s Project Zero hackers and DeepMind boffins have collaborated to uncover a zero-day security vulnerability in real-world code for the first time using AI.

ai cyber detection import-20250527224135 security vulnerability

Added 1 month ago

Paul Butler – Smuggling arbitrary data through an emoji

https://paulbutler.org/2025/smuggling-arbitrary-data-through-an-emoji/

cyber import-20250527224135 security vulnerability

Added 1 month ago

Critical Unauthenticated RCE Flaw Impacts all GNU/Linux systems

https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/

Critical Unauthenticated RCE Flaw, no Common CVE identifiers have been assigned yet, although experts suggest there should be at least three to six.

cyber import-20250527224135 linux security vulnerability

Added 1 month ago

Spotify Introduces Kitsune Vulnerability Management Platform

https://www.infoq.com/news/2022/11/spotify-kitsune-platform/

Spotify recently introduced its security vulnerability management platform, Kitsune. Right from vulnerability detection to providing insights based on metrics, Kitsune manages the overall security vul

import-20250527224135 management security vulnerability

Added 1 month ago

Harden-Runner detection: tj-actions/changed-files action is compromised - StepSecurity

https://search.app/nz29ggeNi26oEF8q9

actions github import-20250527224135 open source security vulnerability

Added 1 month ago

Bypassing airport security via SQL injection

https://ian.sh/tsa

We discovered a serious vulnerability in the Known Crewmember (KCM) and Cockpit Access Security System (CASS) programs used by the Transportation Security Administration.

cyber import-20250527224135 security vulnerability

Added 1 month ago

https://www.scmagazine.com/news/critical-vulnerabilities-in-6-aws-services-disclosed-at-black-hat-usa

aws import-20250527224135 security vulnerability

Added 1 month ago