Coverage tagged "Open source".
Posted by Enxin Xie on Oct 15 Severity: low Affected versions: - Apache Answer through 2.0.2 Description: Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue…
Posted by Li Yang on Oct 15 Severity: low Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given…
Posted by Li Yang on Oct 15 Severity: low Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Default startup profile miss security settings in Apache Kylin. Any deployment has…
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in…
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Potential JDBC source configuration validation vulnerability in Apache Kylin. The…
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Missing authentication for in-house broadcast and polymorphic deserialization…
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Missing authorization on jdbc source config update in Apache Kylin. Impact most to…
arXiv:2610.20647v1 Announce Type: new Abstract: Software-defined radios (SDRs) have become an inexpensive, portable platform for replay attacks, location spoofing and jamming. The HackRF One can…
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the…
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most…
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.4 through 5.0.4 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command…
The threat actor linked to recent AI-assisted attacks on South Korean financial institutions was testing infrastructure and assembling attack tools as early as August 2026, weeks before the banking…
Posted by Jarek Potiuk on Oct 15 Severity: moderate Affected versions: - Apache Airflow Keycloak provider before 0.11.1 Description: The Apache Airflow Keycloak auth manager did not end the session…
Posted by Jarek Potiuk on Oct 15 Severity: moderate Affected versions: - Apache Airflow SFTP provider before 7.0.0 Description: The Apache Airflow SFTP provider's deferrable code paths…
Posted by Jarek Potiuk on Oct 15 Severity: moderate Affected versions: - Apache Airflow SSH provider before 7.0.0 - Apache Airflow SFTP provider before 7.0.0 Description: The Apache Airflow SSH…
Posted by Jarek Potiuk on Oct 15 Severity: important Affected versions: - Apache Airflow Keycloak provider before 0.11.1 Description: The Apache Airflow Keycloak provider's multi-team provisioning…
Posted by Solar Designer on Oct 15 This looks like an AI slop. Nothing was previously disclosed here, so I assume an LLM hallucinated that. The message looks AI-generated.
Posted by eddyflores100 on Oct 15 Follow-up: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10) Summary for the list: the campaign previously disclosed here (fake…
Posted by Jan Schaumann on Oct 15 The existence of this vulnerability was disclosed a few days ago on Twitter, and some of the details have now been published here: https://pwn.ai/blog/pwnescape This…
