Hackers Behind Cuba Ransomware Attacks Using New RAT Malware

[![Cuba Ransomware](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEjG5NY6z_E3mIqws1GTNFoFKEavt9jBxtciK10htSDSQc_JECqfwKvNTPymBW0axc6McWFzM08_t78ovmJx91jcYFgquWC09fNYVXBMKenTKS08JGIU8VnHvwXE ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

Cross Site Scripting (XSS)

LocalStack is vulnerable to cross-site scripting. The vulnerability is due to not having CSRF protection. An attacker can trick a user into visiting a website with malicious Javascript code, which que ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - MEDIUM

CVE-2022-35697

Adobe Experience Manager Core Components version 2.20.6 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL re ...

Continue Reading

CVSS3 - MEDIUM

ALSA-2022:5779: ruby:2.5 security update (Moderate)

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby: Regular expression deni ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

graphql-go through 0.8.0 has infinite recursion in the type definition parser

graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser.Read More ...

Continue Reading

CVSS3 - HIGH

Packj – Large-Scale Security Analysis Platform To Detect Malicious/Risky Open-Source Packages

[![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqa1PDOh-VweIpYJumetie__WPyxsXOCVrUTmjr3IZriLlsp-Yxaf96OFxN-yOD5Z2iizK_D47Hu7hvLOQExD1-kjHrGYBhp9ShJX9IystBY2kaDgGog-CrKTdRjslEx-KVy8zuz ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

graphql-go through 0.8.0 has infinite recursion in the type definition parser

graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser.Read More ...

Continue Reading

CVSS3 - HIGH

CVE-2022-2242

The KUKA SystemSoftware V/KSS in versions prior to 8.6.5 is prone to improper access control as an unauthorized attacker can directly read and write robot configurations when access control is not ava ...

Continue Reading

CVSS3 - CRITICAL

Back to Main

Subscribe for the latest news: