10122 matches found
CVE-2023-47882
The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.920231127 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component...
CVE-2023-43481
An issue in Shenzhen TCL Browser TV Web BrowseHere aka com.tcl.browser 6.65.022dab24cc6231221gp allows a remote attacker to execute arbitrary JavaScript code via the com.tcl.browser.portal.browse.activity.BrowsePageActivity component...
Attacks, Vulnerabilities and Actors 18 December to 24 December 2023
For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of 15 executed attacks, 4 instances of adversary activity, and 7 exploited vulnerabilities,...
Malicious code in mux-leverage-protocol (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b12623ebfedef36fcab6ff1f92426346cafe3c214979943b5a2be849cf35a9d3 The OpenSSF Package Analysis project identified 'mux-leverage-protocol' @ 1.999.0 npm as malicious. It is considered malicious because: - The...
MAL-2023-8747 Malicious code in mux-leverage-protocol (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b12623ebfedef36fcab6ff1f92426346cafe3c214979943b5a2be849cf35a9d3 The OpenSSF Package Analysis project identified 'mux-leverage-protocol' @ 1.999.0 npm as malicious. It is considered malicious because: - The...
MAL-2023-8746 Malicious code in @push-web/tinkoff-push-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e166f22b1c96798bb96d367a25191de8ef60f156cf6cfba086261e66c53609a4 The OpenSSF Package Analysis project identified '@push-web/tinkoff-push-web' @ 2.5.0 npm as malicious. It is considered malicious because: - The...
CVE-2023-49003
An issue in simplemobiletools Simple Dialer 5.18.1 allows an attacker to bypass intended access restrictions via interaction with com.simplemobiletools.dialer.activities.DialerActivity...
CVE-2023-49002
An issue in Xenom Technologies sinous Phone Dialer-voice Call Dialer v.1.2.5 allows an attacker to bypass intended access restrictions via interaction with com.funprime.calldialer.ui.activities.OutgoingActivity...
Kami YI HOME Security Breach
Kami YI HOME is a webcam from Kami. A security vulnerability exists in Kami YI HOME prior to version 4.1.920231127, which originates from a vulnerability that allows remote attackers to execute arbitrary JavaScript code via the com.ants360.yicamera.activity.WebViewActivity component...
Simple Dialer Security Vulnerability
Simple Dialer is a handy phone call manager from Simple Mobile Tools open source. A security vulnerability exists in Simple Mobile Tools Simple Dialer version 5.18.1, which stems from a vulnerability that allows an attacker to bypass access restrictions through interaction with...
TCL BrowseHere Security Breach
Tcl Communication TCL BrowseHere is a video playback browser with a sophisticated interface from TCL Communication China. A security vulnerability exists in TCL BrowseHere version 6.65.022dab24cc6231221gp, which originates from a vulnerability that allows remote attackers to execute arbitrary...
MAL-2023-8745 Malicious code in @pkg-m/m (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a729a302e12ce9d988b8cd980f21cbf38d7e40262fdc86d5d7a0bbc7427e5635 The OpenSSF Package Analysis project identified '@pkg-m/m' @ 1.3.9 npm as malicious. It is considered malicious because: - The package...
CVE-2023-51102
creationtimestamp| type| source ---|---|--- 2023-12-26 19:27:17+00:00| seen| https://t.me/ctinow/159413 2023-12-30 08:16:20+00:00| seen| https://t.me/ctinow/160790...
CVE-2023-51098
creationtimestamp| type| source ---|---|--- 2023-12-26 19:27:13+00:00| seen| https://t.me/ctinow/159409 2023-12-30 08:16:24+00:00| seen| https://t.me/ctinow/160794...
MAL-2023-8744 Malicious code in formated (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 469915f0cc096d71a5ad3349a9e1203ffbdbd158fcb529c064aca57d2dce22e8 The OpenSSF Package Analysis project identified 'formated' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...
GHSA-8WJX-P2F8-5RJP OpenCRX Cross-site Scripting vulnerability
openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...
OpenCRX Cross-site Scripting vulnerability
openCRX 5.2.0 was discovered to contain a cross-site scripting XSS vulnerability via the Name field after creation of a Tracker in Manage Activity...
Malicious code in finalact (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 65ae4f51ac0f42175a709c00e1fa248d12861a7d64bd828cfce2ab35f6a6c106 The OpenSSF Package Analysis project identified 'finalact' @ 1.1.3 npm as malicious. It is considered malicious because: - The package...
