Author: admin
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E devices. Authentication is not required…
The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable…
<p>Affected SIPROTEC 5 devices contain a development shell which is accessible via a physical interface which is not properly restricted.…
Overview A security flaw exists in the configuration management endpoint of the DRC INSIGHT software, allowing an unauthenticated user with…
Apple Intelligence flaw kept stolen tokens reusable on another device Researchers say Apple Intelligence’s token design let attackers steal and…
For the oldstable distribution (bookworm), this problem has been fixedin version 1.2.6-5+deb12u1.For the stable distribution (trixie), this problem has been…
All information within TRA advisories is provided “as is”, without warranty of any kind, including the implied warranties of merchantability…
New npm supply-chain attack self-spreads to steal auth tokens Researchers say a new npm supply-chain campaign hit at least 16…
CVE-2026-35328A vulnerability in libtls related to the processing of thesupported_versions extension in TLS that can result in an infiniteloop.CVE-2026-35329Vulnerabilities in…
<p>Spectrum Power 4 before v4.70 SP12 Security Patch 2 contains multiple vulnerabilities that could allow an attacker to remotely execute…