Tag: supplyChainAttack

  • Topics Everyone Is Talking About No414

    Bun 1.4: Enhanced Compatibility and Leaner JavaScript Tooling • OpenPubkey SSH: Bringing Single Sign-On to SSH Authentication • Rust Supply Chain Attack Compromises Arrayref Releases • From Rust to Zig: A Systems Developers First Impressions • Aaron Swartz, Data Scraping, and Unequal Tech Accountability…

  • Vulnerability Watch No37

    Discourse Rich Text Editor Flaw Enables Stored XSS • Multicluster Global Hub Flaw Lets Compromised Hubs Falsify Data • Malicious Git Config Can Trigger Code Execution in Goose Review • SPIP SQLite Installations Exposed to Authenticated Command Execution • Malicious use-context-selector Commits Compromised Developer Machines…

  • Vulnerability Watch No21

    Hardcoded Backdoor Exposes WordPress Sites to Admin Takeover • Easy Digital Downloads Upload Flaw Could Enable Code Execution • WooCommerce Wholesale Plugin Lets Authors Become Administrators • Netty OCSP Race Can Leak Data to Revoked Servers • Netty Accepts Replayed Expired OCSP Responses…