Security – Page 4 – Njalla

BTC

—

—

ETH

—

—

SOL

—

—

BNB

—

—

GOLD

—

—

XRP

—

—

DOGE

—

—

ADA

—

—

Security 77 articles

A laughing RAT: CrystalX combines spyware, stealer, and prankware features

[MEDIUM] Security Advisory: Parse Server has a LiveQuery protected-field guard bypass via array-like logical operator value (parse-server, parse-server)

[CRITICAL] Security Advisory: CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (ci4-cms-erp/ci4ms)

[HIGH] Security Advisory: YesWiki has Persistant Blind XSS at “/?BazaR&vue=consulter” (yeswiki/yeswiki)

[HIGH] Security Advisory: Ash.Type.Module.cast_input/2 atom exhaustion via unchecked Module.concat allows BEAM VM crash (ash)

[HIGH] Security Advisory: xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion (xmldom, @xmldom/xmldom, @xmldom/xmldom)

[HIGH] Security Advisory: @tinacms/graphql’s Media Endpoints Can Escape the Media Root via Symlinks or Junctions (@tinacms/graphql)

[MEDIUM] Security Advisory: YesWiki has Multiple Reflected Cross-site Scripting Vulnerabilities (yeswiki/yeswiki)

[HIGH] Security Advisory: @tinacms/graphql’s `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions (@tinacms/graphql)

[HIGH] Security Advisory: SiYuan vulnerable to reflected XSS via SVG namespace prefix bypass in SanitizeSVG (getDynamicIcon, unauthenticated) (github.com/siyuan-note/siyuan/kernel)

[MEDIUM] Security Advisory: OpenClaw’s Discord component interaction ingress skips guild/channel policy enforcement (openclaw)

[LOW] Security Advisory: OpenClaw SSRF guard misses four IPv6 special-use ranges (openclaw)