11241 matches found
CVE-2019-19769
creationtimestamp| type| source ---|---|--- 2024-03-11 15:16:41+00:00| seen| https://t.me/ctinow/204769...
CVE-2019-18340
creationtimestamp| type| source ---|---|--- 2024-03-11 14:46:45+00:00| seen| https://t.me/ctinow/204741...
MAL-2024-1070 Malicious code in jitsi-meet-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d00022cc6b75ddc259b9fe60993dbdf646c17b30cce6a76c88798ca229947db The OpenSSF Package Analysis project identified 'jitsi-meet-electron' @ 99.99.99 npm as malicious. It is considered malicious because: - The...
MAL-2024-1068 Malicious code in global-min-document (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f31926381530898f76c33bf3a3941e4c37e5866d33fbe1501baa831b6822165 The OpenSSF Package Analysis project identified 'global-min-document' @ 999999999.99.9 npm as malicious. It is considered malicious because: - T...
Malicious code in profectus-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062a69a64c4e77b2e5cebc7f5d21c239c51139c4d420c9fbf2e616f23ec838a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1066 Malicious code in dropdownformfield (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2713d5570c40f202d4baa70c5d4b4a5ded51d6375ab052be5eb0a89de9d3e153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1065 Malicious code in accessibletrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8474de211a93f6609827bb3a4e63a05cba1f2124131efd6a9ddf34edb2f89ed3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ycs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fcf222dfcf6f0f36588b0c11a3e0fd28bac1b86cccc3eac8afb5f9243afffb7 The OpenSSF Package Analysis project identified 'ycs' @ 3.9.9 npm as malicious. It is considered malicious because: - The package communicates...
Update now! JetBrains TeamCity vulnerability abused at scale
JetBrains issued a warning on March 4, 2024 about two serious vulnerabilities in TeamCity server. The flaws can be used by a remote, unauthenticated attacker with HTTPS access to a TeamCity on-premises server to bypass authentication checks and gain administrative control of the TeamCity server...
Fedora: Security Advisory for plantuml (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: plantuml-1.2024.3-3.fc40
PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case...
MAL-2024-1058 Malicious code in jaas-jwt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e138921f13c1e6284e20c35908236f156dedf323860b924ccdfda713eb03b8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Human vs. Non-Human Identity in SaaS
In today's rapidly evolving SaaS environment, the focus is on human users. This is one of the most compromised areas in SaaS security management and requires strict governance of user roles and permissions, monitoring of privileged users, their level of activity dormant, active, hyperactive, thei...
MAL-2024-1057 Malicious code in pcln-event-dispatcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58d0757d5f390b101d520dbcfa438dc8fdf9197eccea3aae851f57a1cb09eeb3 The OpenSSF Package Analysis project identified 'pcln-event-dispatcher' @ 999999999.99.9 npm as malicious. It is considered malicious because: -...
CVE-2023-49988
creationtimestamp| type| source ---|---|--- 2024-03-07 02:26:54+00:00| seen| https://t.me/ctinow/201994 2024-03-07 02:27:11+00:00| seen| https://t.me/ctinow/202006...
CVE-2024-28111 CSV Injection in exported history CSV files
Canarytokens helps track activity and actions on a network. Canarytokens.org supports exporting the history of a Canarytoken's incidents in CSV format. The generation of these CSV files is vulnerable to a CSV Injection vulnerability. This flaw can be used by an attacker who discovers an HTTP-base...
CVE-2024-20338
creationtimestamp| type| source ---|---|--- 2024-03-06 18:26:42+00:00| seen| https://t.me/ctinow/201617 2024-03-08 01:22:05+00:00| seen| https://t.me/arpsyndicate/4135...
CVE-2023-42776
creationtimestamp| type| source ---|---|--- 2024-03-06 14:41:31+00:00| seen| https://t.me/ctinow/201402...
MAL-2024-1055 Malicious code in add-sugar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c35253404a0c432c7a012459997f522c42254fc055677eab50061c9f4b39edc The OpenSSF Package Analysis project identified 'add-sugar' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...
BIT-GITLAB-2020-13315
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. The profile activity page was not restricting the amount of results one could request, potentially resulting in a denial of service...