MAL-2023-1133 Malicious code in chain00xtest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80e4a9d4552592ce0f6795c5766700fad9ffb00693e9e153665354e7f4286917 The OpenSSF Package Analysis project identified 'chain00xtest2' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-296 Malicious code in dvknpm-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 699740896647f6c3926d3579cb62aaf2d4cb804f000f96f4ad3d049f5c176b13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Abandoned Cart Lite For WooCommerce 5.14.2 Authentication Bypass

Entering the URL in browser will give you access to the respective users account. If the wordpress admin user himself...

Understanding Malware-as-a-Service

Money is the root of all evil, including cybercrime. Thus, it was inevitable that malware creators would one day begin not only to distribute malicious programs themselves, but also to sell them to less technically proficient attackers, thereby lowering the threshold for entering the cybercrimina...

CVE-2023-2847

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied th...

CVE-2023-2847

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied th...

Privilege escalation

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied th...

CVE-2023-2847

CVE-2023-2847 describes a local privilege escalation in ESET products for Linux/macOS caused by improper privilege management. A user with lower privileges could trigger actions with root-level privileges; affected components include ESET Server Security for Linux, Endpoint Antivirus for Linux/ma...

CVE-2023-2847 Local privilege escalation in ESET products for Linux and MacOS

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied th...

MAL-2023-1175 Malicious code in eslint-config-mirakl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0a25468bc92620eecf8b46085022ddaa259cf5b4ef94bb98423249eeba1e308 The OpenSSF Package Analysis project identified 'eslint-config-mirakl' @ 22.5.15 npm as malicious. It is considered malicious because: - The...

SUBNET PowerSYSTEM Center

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: SUBNET Solutions Inc. Equipment: PowerSYSTEM Center Vulnerabilities: Cross-site Scripting, Authentication Bypass by Capture-replay 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

CVE-2013-1675

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 07:01:57+00:00| seen| https://t.me/arpsyndicate/1416 2024-12-24 20:27:05+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971289 2025-02-23 02:10:03+00:00|...

Malicious code in cdp-ops--ts-accesslog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f91b885ec95bb15b4a6f58f71cccba8ac7528ef5c5bcae18f34f74e27f0f444 The OpenSSF Package Analysis project identified 'cdp-ops--ts-accesslog' @ 1.4.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-1130 Malicious code in cdp-ops--ts-accesslog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f91b885ec95bb15b4a6f58f71cccba8ac7528ef5c5bcae18f34f74e27f0f444 The OpenSSF Package Analysis project identified 'cdp-ops--ts-accesslog' @ 1.4.3 npm as malicious. It is considered malicious because: - The...

Malicious code in snew-classic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ac296eeaba98c7d28c3be79bec7f5ca26b13e1b576956695d24f12d232f7c89 The OpenSSF Package Analysis project identified 'snew-classic-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in dragonsense-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b16039afbf251f78d8c6adf4bb07342e8c112167bef9e0749651dacbdaf12c26 The OpenSSF Package Analysis project identified 'dragonsense-config' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in dragonconnect-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20e247592dd8735f170e77329b3ef9ae7fa59a57437134b4e0e501cc3a395531 The OpenSSF Package Analysis project identified 'dragonconnect-config' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1179 Malicious code in fabric-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95e54d11b0e8b8ae3ec65bb015b953544d6e1b0e8e8d5ac3ebe884d858528d42 The OpenSSF Package Analysis project identified 'fabric-integration' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in fabric-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95e54d11b0e8b8ae3ec65bb015b953544d6e1b0e8e8d5ac3ebe884d858528d42 The OpenSSF Package Analysis project identified 'fabric-integration' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in js-integration-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdf524832b5a7754384bb05dae5fb10558591f104915c2f9b5518db338003a92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...