3988 matches found
Malicious code in @diotoborg/excepturi-ad (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b2b73261705790240f1c0a6d64ce1e4b6f19576f0d343f0077156be876fd01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @diotoborg/excepturi-ad
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @diotoborg/tempore-ad-veritatis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30d5ad4a37dd1d78fcb4a5d4f9b64f9388bd40e4f0ed863516fd7fd77dd91a78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @diotoborg/tempore-ad-veritatis
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @diotoborg/ad-veritatis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d89184b713db53c3730d647c707beda5e801fce902657999722834f36427547 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @diotoborg/ipsam-ad (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b2f53a6196965b028d7b07e0a24722319b3da058b627fd598edee431d0a12b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8111 Malicious code in @diotoborg/ad-veritatis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d89184b713db53c3730d647c707beda5e801fce902657999722834f36427547 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @diotoborg/ad-veritatis
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @diotoborg/ipsam-ad
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @diotoborg/illum-ad-corporis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697629157fc87cdd44f67258a507098c56ef42fb64823ae1130b671cfd7ceb7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @diotoborg/illum-ad-corporis
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2024-8358 Malicious code in @diotoborg/illum-ad-corporis (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697629157fc87cdd44f67258a507098c56ef42fb64823ae1130b671cfd7ceb7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Symantec Messaging Gateway 10 Exposure Of Stored AD Password
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'digest' require "openssl" class MetasploitModule 'Symantec Messaging Gateway 10 Exposure of Stored AD Password Vulnerability', 'Description' = %q This module wi...
Outlook Web App (OWA) Brute Force Utility
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Outlook Web App OWA Brute Force Utility', 'Description' = %q This module tests credentials on OWA 2003, 2007, 2010, 2013, and 2016 servers. ,...
AD CS Certificate Template Management
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AD CS Certificate Template Management', 'Description' = %q This module can create, read, update, and delete AD CS certificate templates from a...
Breaking Down AD CS Vulnerabilities: Insights for InfoSec Professionals
The most dangerous vulnerability you've never heard of. In the world of cybersecurity, vulnerabilities are discovered so often, and at such a high rate, that it can be very difficult to keep up with. Some vulnerabilities will start ringing alarm bells within your security tooling, while others ar...
Fake Canva home page leads to browser lock
In a previous blog post, we showed how fraudsters were leveraging features from the very company Microsoft they were impersonating. We continue this series with another clever trick abusing Canva, a popular online tool for graphic design. This time, the scammers registered an account on Canva to...
CVE-2024-44919
A cross-site scripting XSS vulnerability in the component adminads.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ad description parameter...
WordPress infolinks Ad Wrap plugin <= 1.0.2 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by Daniel Ruf in WordPress Plugin infolinks Ad Wrap versions = 1.0.2...
CVE-2024-44919
A cross-site scripting XSS vulnerability in the component adminads.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ad description parameter...