@euvd-bot.bsky.social🚨 EUVD-2026-97383 📊 5.3/10 🏢 jishenghua 📝 jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to read the tenant's operation au... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97383 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97384 📊 5.3/10 🏢 jishenghua 📝 jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unassigned warehouses by supplying ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97384 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97385 📊 5.3/10 🏢 jishenghua 📝 jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users restricted to personal or department data to list oth... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97385 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97386 📊 5.3/10 🏢 jishenghua 📝 jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authenticated users to bypass role data s... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97386 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97387 📊 5.3/10 🏢 jishenghua 📝 jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to create pre-approved bills by setting status in POS... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97387 #cybersecurity #infosec #cve #euvd
@shodansafari.lolASN: AS14813
Location: Bridgetown, BB
Added: 2026-10-05T21:37
@euvd-bot.bsky.social🚨 EUVD-2026-97388 📊 5.3/10 🏢 jishenghua 📝 jshERP through 3.6 contains an improper authorization vulnerability that allows low-privilege authenticated users to read any settlement account ledger... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97388 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97389 📊 8.7/10 🏢 jishenghua 📝 jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows authenticated users to assign ar... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97389 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97390 📊 8.7/10 🏢 jishenghua 📝 jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97390 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97391 📊 7.1/10 🏢 jishenghua 📝 jshERP through 3.6 contains an information disclosure vulnerability that allows any authenticated user to read platform-wide configuration secrets via ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97391 #cybersecurity #infosec #cve #euvd
@euvd-bot.bsky.social🚨 EUVD-2026-97392 📊 5.3/10 🏢 jishenghua 📝 jshERP through 3.6 contains a missing authorization vulnerability that allows low-privilege authenticated users to create tenant-wide master data via a... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-97392 #cybersecurity #infosec #cve #euvd
@vnclotto.misentropic.comASN: AS2514 NTT PC Communications, Inc.
Country: JP
City: Kawaguchi
State: Saitama
Scanned: 2025-05-06T06:13:13
https://computernewb.com/vncresolver/browse#id/46315101
@cynicalthreatmodel.bsky.social[THREAT] Identified threat: Open redirect on the login page that respects any return_to URL [RESPONSE] Dev/management: There's no CVE for it yet, so we don't have to act. #threatmodeling #infosec
@ninjaowl.aiUkraine strikes third Yandex data center, disrupting digital services across Russia #cybersecurity #hacking #news #infosec #security #technology #privacy therecord.media/ukra...
@redsiege.comHere's what we've got coming up this week!
Join The Wednesday Offensive, every Wednesday at 130pm ET 🔗 redsiege.com/wedoff
@ninjaowl.aiGitLab warns of max severity code execution vulnerability #cybersecurity #hacking #news #infosec #security #technology #privacy
@puretech.newsWhy small businesses can’t afford to treat cybersecurity as an afterthought #Technology #Cybersecurity #smallbusiness #dataprotection #cybercrime #infosec
@stackflag.bsky.socialCVE-2023-50447 - pillow
The Python Pillow package, which many applications use to handle images, contains a flaw that could allow a malicious user to run unwanted code on your system. This risk is resolved in the…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2021-23334 - static-eval
The static-eval component used in several JavaScript projects can be tricked into executing code it should not run. This could let an attacker run harmful commands on your system.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@steelwise.bsky.socialASOS says nobody broke in. Somebody impersonated a trusted contact, got one employee login, and used it on the outside platforms that reach its customers. Which of your suppliers can message everyone you sell to? Read the filing #asos #databreach #socialengineering #infosec