PT-2023-5955 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a logic error in the decideCancelProvisioningDialog function of AdminIntegratedFlowPrepareActivity.java, which can be exploited to bypass factory reset protections...

User Activity Log < 1.6.7 - IP Spoofing

Description This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. 1. In User Activity Log Settings, enable the setting "Allow Ip Address of users to log." and save...

User Activity Log < 1.6.7 - IP Spoofing

Description This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. PoC 1. In User Activity Log Settings, enable the setting "Allow Ip Address of users to log." and save...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that originates from a messy proxy in the openContentUri module of ActivityManagerService.java, which can be exploited by an attacker to obtain sensitive...

PT-2023-17925 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a missing permission check in the onCreate method of ManagePermissionsActivity.java. This could allow bypassing factory reset protections, leading to local escalatio...

PT-2023-18014 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: In the registerServiceLocked function of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This could lead to...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a lack of privilege checking in Create of ManagePermissionsActivity.java, which can be exploited by an attacker to gain elevated privileges...

PT-2023-17933 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a missing permission check in the onCreate method of ManagePermissionsActivity.java. This could allow bypassing factory reset protections, leading to local...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the code in the deceeCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, which can be exploited by an attacker to...

MAL-2023-1452 Malicious code in syns-knox-xss-allwhere (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3c6b6e1a22a56620b309d722c59897f1e6d2225c56e8faafc1b87beefc26750 The OpenSSF Package Analysis project identified 'syns-knox-xss-allwhere' @ 1.0.0 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1450 Malicious code in blockly-mirror-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02d12c57048b068cdb5e63126d40fe5ecf1a822c9562ff7657ada5e4862b2be7 The OpenSSF Package Analysis project identified 'blockly-mirror-demo' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

Malicious code in blockly-mirror-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02d12c57048b068cdb5e63126d40fe5ecf1a822c9562ff7657ada5e4862b2be7 The OpenSSF Package Analysis project identified 'blockly-mirror-demo' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

Malicious code in zustand-rc.1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f36f860dc8e345626951d6e9c0b4c8798cb5b2ef0abd7e199f44840e71831a68 The OpenSSF Package Analysis project identified 'zustand-rc.1' @ 1.999.9 npm as malicious. It is considered malicious because: - The package...

CVE-2023-32563

creationtimestamp| type| source ---|---|--- 2023-08-11 00:16:14+00:00| seen| https://t.me/cibsecurity/68260 2023-08-16 19:10:04+00:00| seen| https://t.me/truesecator/4739 2023-09-03 07:06:40+00:00| published-proof-of-concept| https://t.me/CNArsenal/998 2024-10-31 00:00:00+00:00| exploited| The...

Ransomware review: August 2023

This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. In this report, "known attacks" are those where the victim did not pay a ransom. This provides the best overall picture of...

Malicious code in puppet-module-posix-system-r3.2 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 835ce606cd37fa823a80a445ab30dce0ec0005af3a78f9ed7a8d35d63db99474 The OpenSSF Package Analysis project identified 'puppet-module-posix-system-r3.2' @ 1.0.0 rubygems as malicious. It is considered malicious...

Malicious code in eslint-config-ironfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c131e05243f24fb2099561dacc47fb3017389f480a323ac185ed3271a6907de The OpenSSF Package Analysis project identified 'eslint-config-ironfish' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

WordPress User Activity Tracking and Log Plugin < 4.0.9 is vulnerable to Cross Site Request Forgery (CSRF)

Software User Activity Tracking and Log Type Plugin Vulnerable versions 4.0.9 Fixed in 4.0.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-4150 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 8eda0dc496af Credits Erwan L...

WordPress User Activity Log Plugin <= 1.6.5 is vulnerable to Broken Access Control

Software User Activity Log Type Plugin Vulnerable versions = 1.6.5 Fixed in 1.6.6 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 4bfc0a7fe11d Credits WordFence Required privilege...

Malicious code in govinda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a146f02f67219a9fce8688b26d78fe74c7b2adccbf6ea61812d0d0c1d6caeaf1 The OpenSSF Package Analysis project identified 'govinda' @ 1.0.2 npm as malicious. It is considered malicious because: - The package communicat...