CVE-2018-20663 - The Reporting Addon (aka Reports Addon) through 2019-01-02 for CUBA Platform through 6.10.x has Persistent XSS via the "Reports > Reports" name field. ...
6 years ago Cuba
Municipalities Face a Constant Battle as Ransomware Snowballs - Municipalities in the United States, and globally, are experiencing a fresh wave of ransomware attacks, with even big cities like Dallas falling to the gangs' activities. In a prime example of the trend, on Nov. 7, the Play ransomware gang posted ...
1 year ago Darkreading.com Cuba
CVE-2025-32961 - The Cuba JPA web API enables loading and saving any entities defined in the application data model by sending simple HTTP requests. Prior to version 1.1.1, the input parameter, which consists of a file path and name, can be manipulated to return the ...
2 weeks ago Cuba
CVE-2025-32960 - The CUBA REST API add-on performs operations on data and entities. Prior to version 7.2.7, the input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with ...
2 weeks ago Cuba
CVE-2025-32959 - CUBA Platform is a high level framework for enterprise applications development. Prior to version 7.2.23, the local file storage implementation does not restrict the size of uploaded files. An attacker could exploit this by uploading excessively ...
2 weeks ago Cuba
Waiting for the BlackCat rebrand - We saw another ransomware operation shut down this week after first getting breached by law enforcement and then targeting critical infrastructure, putting them further in the spotlight of the US government. While the Tor onion domain seizure was a ...
1 year ago Bleepingcomputer.com MedusaCubaSTORMOUS