Aggregator

A vulnerability classified as critical was found in Jenkins Script Security Plugin up to 1367.vdf2fc45f229c. The affected element is an unknown function. The manipulation results in permission issues. This vulnerability is identified as CVE-2024-52549. The attack can only be performed from the local network. There is not any exploit available.

A vulnerability, which was classified as critical, has been found in Jenkins Groovy Plugin up to 3990.vd281dd77a_388. The impacted element is an unknown function of the component Jenkinsfile Handler. This manipulation causes permission issues. This vulnerability is tracked as CVE-2024-52550. The attack is only possible within the local network. No exploit exists.

A vulnerability was found in Rack Gem on Ruby. It has been declared as problematic. The affected element is an unknown function of the component Header Parser. Executing manipulation can lead to denial of service. This vulnerability is handled as CVE-2023-27539. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

The group warned that law-enforcement crackdowns are imminent in the wake of the takedown, but its extortion threats against Salesforce victims remain active.

Austria's data protection authority ruled that Microsoft illegally tracked students using its education software by failing to give them access to their data and using cookies without consent.

Learn how to streamline security with the CIS SecureSuite Platform and new Intune/M365 Build Kits — plus audit-ready reporting tools.

Секрет — в молекулах размером меньше вируса, которые обучают организм сопротивляться.

A vulnerability was found in Zscaler Client Connector on macOS. It has been declared as critical. This issue affects some unknown processing of the component ZScaler Service. Executing manipulation can lead to improper input validation. This vulnerability appears as CVE-2024-23482. The attack requires local access. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability labeled as critical has been found in Copeland LP E3 Supervisory Control up to 2.31F00. The impacted element is an unknown function. The manipulation results in insufficiently protected credentials. This vulnerability is cataloged as CVE-2025-6519. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

Counter Threat Unit™ (CTU) researchers are investigating multiple incidents in an ongoing campaign targeting users of the WhatsApp messaging platform. The campaign, which started on September 29, 2025, is focused on Brazil and seeks to trick users into executing a malicious file attached to a self-spreading message received from a previously infected WhatsApp web session. […]

A vulnerability described as problematic has been identified in Siemens Siveillance Control. This affects an unknown part of the component Access Group Handler. Such manipulation leads to incorrect authorization. This vulnerability is listed as CVE-2023-45793. The attack must be carried out locally. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability classified as critical was found in Script Security Plugin up to 1335.vf07d9ce377a_e on Jenkins. This affects an unknown function. Executing manipulation can lead to sandbox issue. The identification of this vulnerability is CVE-2024-34145. The attack needs to be done within the local network. There is no exploit available.

A vulnerability, which was classified as critical, has been found in Git Server Plugin up to 114.v068a_c7cc2574 on Jenkins. This impacts an unknown function. The manipulation leads to permission issues. This vulnerability is referenced as CVE-2024-34146. The attack needs to be initiated within the local network. No exploit is available.

A vulnerability was found in Telegram Bot Plugin up to 1.4.0 on Jenkins. It has been rated as problematic. This issue affects some unknown processing of the component Controller File System Handler. The manipulation leads to missing encryption of sensitive data. This vulnerability is documented as CVE-2024-34147. The attack requires being on the local network. There is not any exploit available.

A vulnerability classified as critical was found in witmy my-springsecurity-plus up to 2024-07-04. This affects an unknown part of the file /api/dept/build. The manipulation of the argument params.dataScope results in sql injection. This vulnerability is reported as CVE-2024-6680. The attack can be launched remotely. Moreover, an exploit is present. It appears that this entry has been assigned a duplicate CVE-2024-40541.

A vulnerability, which was classified as critical, has been found in witmy my-springsecurity-plus up to 2024-07-04. This vulnerability affects unknown code of the file /api/dept. This manipulation of the argument params.dataScope causes sql injection. This vulnerability appears as CVE-2024-6681. The attack may be initiated remotely. In addition, an exploit is available. This entry seems to have a duplicate CVE-2024-40540 assigned.

A vulnerability was found in Django up to 3.2.24/4.2.10/5.0.2. It has been declared as problematic. The affected element is the function django.utils.text.Truncator.words of the component Regular Expression Handler. Executing manipulation can lead to inefficient regular expression complexity. This vulnerability is handled as CVE-2024-27351. The attack can only be done within the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Script Security Plugin up to 1335.vf07d9ce377a_e on Jenkins. Affected is an unknown function. The manipulation results in sandbox issue. This vulnerability is identified as CVE-2024-34144. The attack can only be performed from the local network. There is not any exploit available.

A vulnerability, which was classified as critical, was found in Zscaler Client Connector up to 4.3.0 on Windows. Affected by this vulnerability is an unknown functionality. The manipulation results in link following. This vulnerability is cataloged as CVE-2023-41969. The attack must be initiated from a local position. There is no exploit available. You should upgrade the affected component.