Skip to content
Threat Feed
Subscribe

Tag

Unauthorized_access

3 briefs RSS
high advisory

SiYuan Publish-Mode Reader Configuration and Index Mutation Vulnerability

SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs, leading to configuration changes, denial of service, data corruption, and information disclosure by manipulating cloud sync intervals, graph configurations, SQL block content, and recent-documents lists.

siyuan misconfiguration unauthorized_access data_manipulation
2r 1t
high advisory

Kubernetes Unauthorized Access Attempt Detection

This analytic detects unauthorized access attempts to Kubernetes by analyzing Kubernetes audit logs, identifying anomalies in access patterns based on request source and response statuses, potentially leading to unauthorized control over Kubernetes resources.

Kubernetes +1 unauthorized_access cloud
2r 1t
high advisory

ESXi External Root Login Activity Detection

Detection of ESXi UI access using the root account from external IP addresses, bypassing role-based access controls and potentially indicating unauthorized activity or compromised credentials.

ESXi vmware root_login unauthorized_access t1078
2r 1t