Scanning Activity for CVE-2024-22024 (XXE) Vulnerability in Ivanti

...

CVE-2024-25118

creationtimestamp| type| source ---|---|--- 2024-02-14 00:21:58+00:00| seen| https://t.me/ctinow/184320 2024-03-06 08:06:58+00:00| seen| https://t.me/ctinow/201082...

WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

Software WP Activity Log Type Plugin Vulnerable versions = 4.6.1 Fixed in 4.6.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-50905 Patch priority Medium CVSS severity Medium 7.1 Developer Melapress PSID 69f398753cfe Credits NamGyu Kang Required privilege...

CVE-2024-21410

creationtimestamp| type| source ---|---|--- 2024-02-13 20:37:02+00:00| seen| https://t.me/ctinow/184168 2024-02-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1227 2024-02-14 16:13:10+00:00| seen| https://t.me/itsecnews/4112 2024-02-15 06:21:50+00:00| exploited|...

CVE-2024-1369

creationtimestamp| type| source ---|---|--- 2024-02-13 20:22:15+00:00| seen| https://t.me/ctinow/184140 2024-03-05 02:01:54+00:00| seen| https://t.me/ctinow/199812...

CVE-2024-21412

creationtimestamp| type| source ---|---|--- 2024-02-13 19:17:24+00:00| seen| https://t.me/ctinow/184061 2024-02-13 20:37:03+00:00| seen| https://t.me/ctinow/184169 2024-02-13 20:41:42+00:00| seen| https://t.me/ctinow/184172 2024-02-13 20:41:43+00:00| seen| https://t.me/ctinow/184173 2024-02-13...

Malicious code in wickrserverdirectory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f730645eb2725e8a803ead1923d965ab8417efbdfb226db5f57117a42010263b The OpenSSF Package Analysis project identified 'wickrserverdirectory' @ 6.37.8 npm as malicious. It is considered malicious because: - The...

Cyberattack on Democracy: Escalating Cyber Threats Immediately Ahead of Taiwan’s 2024 Presidential Election

Cyberattack on Democracy: Escalating Cyber Threats Immediately Ahead of Taiwan’s 2024 Presidential Election By Anne An · February 13, 2024 Preface Cybersecurity has become an integral part of election security. Nation-state actors and other politically motivated groups are likely to try to...

Malicious code in en-task-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 430b6af14481f12dfa919057a897496d1f551a6e0a10bb136d228753517161b8 The OpenSSF Package Analysis project identified 'en-task-helpers' @ 1.29.20 npm as malicious. It is considered malicious because: - The package...

MAL-2024-989 Malicious code in en-task-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 430b6af14481f12dfa919057a897496d1f551a6e0a10bb136d228753517161b8 The OpenSSF Package Analysis project identified 'en-task-helpers' @ 1.29.20 npm as malicious. It is considered malicious because: - The package...

CVE-2024-23118

creationtimestamp| type| source ---|---|--- 2024-02-11 15:16:15+00:00| seen| https://t.me/arpsyndicate/3420...

CVE-2019-18840

creationtimestamp| type| source ---|---|--- 2024-02-11 10:01:55+00:00| seen| https://t.me/ctinow/182730...

MAL-2024-986 Malicious code in @globalsearch/abstraction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c271fedc45bc79b4a8271bea06418a439b10ad445df1c5ea1cc19fcf1dd377a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-20953

creationtimestamp| type| source ---|---|--- 2024-02-10 10:11:49+00:00| seen| https://t.me/ctinow/182506 2025-02-24 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2025-02-24 18:26:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5199 2025-02-24 18:53:21+00:00| seen|...

MAL-2024-985 Malicious code in iris-front-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed1b8ea683be3ab1a06938511d841bfbd293b36b9a8bcccedd6d794a2af3f85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-23749

creationtimestamp| type| source ---|---|--- 2024-02-09 09:21:45+00:00| seen| https://t.me/ctinow/181904 2024-02-11 13:04:04+00:00| seen| https://t.me/arpsyndicate/3377 2024-02-14 08:56:59+00:00| seen| https://t.me/ctinow/184478 2024-02-14 17:16:42+00:00| seen| https://t.me/ctinow/184827 2024-02-1...

CVE-2024-24830

creationtimestamp| type| source ---|---|--- 2024-02-09 00:26:30+00:00| seen| https://t.me/ctinow/181728 2024-02-12 05:41:33+00:00| seen| https://t.me/arpsyndicate/3441 2024-02-15 21:17:00+00:00| seen| https://t.me/ctinow/185878 2024-03-02 17:41:37+00:00| seen| https://t.me/ctinow/198427...

CISA and Partners Release Advisory on PRC-sponsored Volt Typhoon Activity and Supplemental Living Off the Land Guidance

Today, CISA, the National Security Agency NSA, and the Federal Bureau of Investigation FBI released a joint Cybersecurity Advisory CSA, PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure alongside supplemental Joint Guidance: Identifying and...

MAL-2024-973 Malicious code in packages-analytic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 970fc09fccad26ac5a8eb48041b00f5f843260c7c594cd0211198e2b191f82c0 The OpenSSF Package Analysis project identified 'packages-analytic' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in discord.js-commandv14.1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6755481c28189c15e2d7c4b6e9aa1992ba3317cd999a39efef14219c69956d09 The OpenSSF Package Analysis project identified 'discord.js-commandv14.1' @ 1.0.0 npm as malicious. It is considered malicious because: - The...